Privacy Policy
One to One Secret Chat

Effective date: 6 August 2026

One to One Secret Chat (“the App”) is a private, end-to-end encrypted 1:1 messenger. This policy explains what data the App handles, what we can and cannot see, and your rights.

The short version

Your messages, photos, videos, files, and calls are end-to-end encrypted. We cannot read, listen to, or watch any of them — technically, not just as a promise. Encryption keys are generated on your device and never leave it. Our servers only ever store ciphertext (scrambled data).

What is encrypted end-to-end

Content	How it is handled
Text messages	Encrypted on your device (Curve25519 key exchange + AES-GCM). Servers store ciphertext only.
Photos, videos, files	Encrypted on your device before upload, including the file name, type, and size. Servers store ciphertext blobs under random names.
Voice and video calls	Transmitted directly between the two devices (peer-to-peer WebRTC with DTLS-SRTP encryption). Call audio and video never touch our servers and are never stored. Call setup data (signaling) is additionally encrypted with your pair’s keys.

Data we do process

To operate the service we process a minimal set of account and technical data:

Email address — used as your login and shown to the person you pair with.
Public keys — the public half of your encryption keys (safe to share by design).
Metadata — which two accounts are paired, message timestamps, and call start/end times. We do not sell or share this data, and we do not use it for advertising.
Push notification tokens — so your device can be notified of new messages and calls. Notifications never contain message content.

Where data is stored

Encrypted data and account data are stored on Google Firebase (Firestore, Cloud Storage, Cloud Functions) in the European Union (europe-west1, Belgium). Google acts as our data processor and cannot decrypt your content either.

Subscriptions and payments

Voice and video calling requires a subscription purchased through Apple’s App Store. Payment is handled entirely by Apple; we never see your payment details. See Apple’s privacy policy for how Apple processes payment data.

What we do NOT do

No advertising, no trackers, no analytics SDKs.
No selling or sharing of any data with third parties.
No access to your address book, location, or photo library (you explicitly pick each photo you send).

Data retention and deletion

Deleting a conversation in the App deletes its messages for both sides.
To delete your account and all associated data, contact us at the address below — we will remove your account data within 30 days.

Your rights (GDPR)

If you are in the EU/EEA you have the right to access, rectify, delete, and port your personal data, and to lodge a complaint with a supervisory authority. Since your content is end-to-end encrypted, most of it is technically inaccessible even to us — the data we can act on is the account and metadata listed above.

Children

The App is not directed at children under 16. Do not create an account if you are under 16.

Changes

We will update this page when the policy changes and adjust the effective date above.

Contact

Data controller: Chenghao Li
Email: chenghao.li@gmx.de

Privacy PolicyOne to One Secret Chat