United CHAT is built so that we, and anyone else, learn as little
about you as technically possible. This policy explains — plainly — what that means.
The short version: We do not ask for your name, phone number,
or email. We cannot read your messages. We do not run analytics, advertising,
or trackers. We do not sell or share data, because we do not collect data that
identifies you.
Information we do not collect
No identity. Creating and using United CHAT requires no
phone number, no email address, and no real name. Your display name is stored
only on your own device and never sent to our servers.
No message content. Messages, photos, videos, voice notes,
and documents are end-to-end encrypted. We cannot read, store, or recover them.
No contact graph. Our servers do not store who you talk to.
No analytics or advertising. The app contains no third-party
analytics SDKs, no ad networks, and no cross-app tracking.
Limited technical data
Network address. To deliver messages and to protect your
encryption key, the app connects to our relay. Where enabled, this traffic is
routed over the Tor network so your IP address is kept away from the relay. We
do not retain IP addresses; any address seen is used only transiently for
abuse-prevention and is not linked to your identity.
Random account identifier. Your account is represented on
our server only by a random identifier that is not derived from, and cannot be
traced back to, any personal information.
Encryption key share. Part of your database key is held on
our server so the data on a lost device can be made unreadable remotely. This
share is useless on its own and is never combined with personal data.
Subscriptions and payments
Subscriptions are processed by Apple through the App Store. We never see your
payment details. Apple's handling of purchase data is governed by Apple's own
privacy policy. Access can also be granted by an invite code, which involves no
payment and no Apple ID link on our side.
Your controls
Remote wipe. You can invalidate your data from any browser
using secrets known only to you — even if the device is offline.
Automatic wipe. You can set the app to destroy your key after
a period of inactivity you choose.
On-device erase. An emergency code wipes everything locally,
instantly, with no network needed.
Children
United CHAT is not directed to children and is intended for adults.
Changes
If this policy changes, the updated version will be posted here with a new date.