1# Privacy Policy — SophaxChat23*Last updated: 2026-03-15*45## The short version67SophaxChat collects nothing. There are no servers. There is no company watching you.89## What data SophaxChat collects1011**None.** SophaxChat does not collect, transmit, store, or share any personal data with any third party — because there is no third party. There is no server, no backend, no analytics, no crash reporting, no telemetry.1213## What stays on your device1415The following data exists only on your device and is never transmitted anywhere except directly to the peer you are communicating with:1617- Your display name (chosen by you at first launch)18- Your cryptographic identity keys (Ed25519 + X25519 key pairs, stored in iOS Keychain)19- Your messages (encrypted at rest with AES-256-GCM, stored in Application Support)20- App settings (stored in UserDefaults: aliases, disappearing message timers, app lock toggle)2122All of the above is encrypted on your device and inaccessible to SophaxChat, to any server, and to iCloud backup (`kSecAttrAccessibleWhenUnlockedThisDeviceOnly`).2324## How messages are transmitted2526Messages travel directly from your device to the recipient's device — over Bluetooth LE, WiFi Direct, or peer-to-peer TCP (optionally via Tor/Orbot). No message ever passes through a server operated by SophaxChat or anyone else.2728## Permissions used2930| Permission | Why |31|---|---|32| Bluetooth | Discover nearby users and relay messages without internet |33| Local Network | Discover nearby users over WiFi |34| Camera | Take and send encrypted photos |35| Microphone | Record encrypted voice messages |36| Photo Library | Send images from your library |37| Face ID / Touch ID | Unlock the app when App Lock is enabled |3839No permission is used for tracking, analytics, or any purpose beyond what is listed above.4041## Third-party SDKs4243None. SophaxChat has zero third-party dependencies. It uses only Apple's own system frameworks (CryptoKit, MultipeerConnectivity, Network.framework, AVFoundation, LocalAuthentication).4445## Open source4647SophaxChat is fully open source. You can verify every claim in this policy by reading the source code:4849**[github.com/richardmetzner/SophaxChat](https://github.com/richardmetzner/SophaxChat)**5051## Changes to this policy5253If this policy changes in any way that reduces your privacy, it will be announced prominently in the repository and in the app. Any such change would be contrary to the project's core philosophy and would represent a betrayal of user trust.5455## Contact5657Security vulnerabilities: [GitHub Security Advisories](https://github.com/richardmetzner/SophaxChat/security/advisories/new)5859General questions: [GitHub Issues](https://github.com/richardmetzner/SophaxChat/issues)