Privacy Policy · TruchiChat

TruchiChat uses the minimum data needed to deliver encrypted messages. The content of conversations can’t be read. The server at api.truchichat.com relays the encrypted content and stores it temporarily. This policy applies to the iPhone app and to the Android app.

1. Sign-Up

You choose a display name and the keys are created on your phone. We don’t ask for your email, phone number or address book. There is no public directory: you can only chat with people you invite or who invite you.

2. Data We Process

Your account ID, name, public keys and session.
Your profile photo, if you set one. Unlike messages, files and calls, it isn’t end-to-end encrypted: we store it on the server as your phone uploads it (scaled down to 512 pixels) and only give it to people who have a chat with you. It’s deleted when you remove it or delete your account. The name and photo you give a contact never leave your phone.
Messages, photos and audio, already encrypted, while they’re being delivered.
Connection time, approximate sizes and chat identifiers.
Apple notification — without the message text. Who’s writing to you and in which chat travels encrypted inside the notification, so Apple doesn’t see it; the key that encrypts it is generated by your iPhone and known to our server, which needs that data to deliver the notification to you. In other words: the server knows who talks to whom and when, never what is said.
Google notification, on Android with Google Play (Firebase Cloud Messaging) — it doesn’t carry the message text, who’s writing to you or the chat: it only wakes up the app, which then fetches the encrypted message from our server. Google sees when a notification goes to which phone (a token), not who is writing or what. As on iPhone, our server knows who talks to whom and when, never what is said.
Incoming call notification with the app closed.
The map for picking a place, on Android: while you move it, the phone requests the map tiles from our server (api.truchichat.com), which therefore sees which area you’re looking at, not the place you send, which goes encrypted in the chat. The tiles come from OpenStreetMap, but our server is the one requesting them, under its own name and without your IP: OpenStreetMap doesn’t see who is looking. We don’t record which area each person looks at; the server stores the tiles, which are the same for everyone, so it doesn’t have to request them again.
Whether a chat is muted.
App version, system version and phone model, for support and compatibility. On Android, also whether it runs GrapheneOS or Android.

3. What We Don’t Collect

Your texts, files and calls in readable form. Calls are encrypted from one phone to the other, including when they go through our relay server.
Your address book contacts (unless you send them yourself in a chat).
Location to track you, advertising or profiles for third parties. A pin you send in a chat travels encrypted to that conversation, just like a photo: the server doesn’t read it and TruchiChat doesn’t track you. The Android map area (above) is only seen while it’s being served and isn’t stored.

4. Server Retention

Encrypted content that hasn’t been delivered yet is deleted after 24 hours. What’s on your phone stays there until you delete it or uninstall the app.

Your IP, to stop abuse. So that nobody can create accounts or try invitations nonstop, the server counts how many times this is done from each IP address. Each counter stores the IP, the number of attempts and when it expires; not your account or what you do. It’s deleted automatically when it expires:

Creating an account: up to 8 times every 15 minutes. The counter lasts 15 minutes.
Accepting an invitation: up to 40 times per hour. The counter lasts 1 hour.
Other similar counters (connections per minute and, in the version for Android without Google, sign-ups per day) exist only in the server’s memory, not on disk, and are lost when it restarts.
The admin panel, which only we use: sign-in attempts are counted per IP for 15 minutes or 1 hour, and each open session stores the IP and browser of whoever signs in for as long as the session lasts: at most 12 hours without use and one week in total.

5. Reports and Blocking

You can block and report from the chat’s info screen. A report includes who is reporting whom, in which chat, the reason and any details you write, if you write any; never the content of the chat: neither messages nor files.

6. Your Rights

You can delete your account whenever you want: the steps are in section 7. For privacy matters: soporte@truchichat.com or the support section.

7. Deleting Your Account

In the app: Settings › Delete Account. The account is deleted on our server and on your phone, and your contacts see in the chat that the account has been deleted.

Without the app: write to soporte@truchichat.com with the account’s display name and we’ll delete it. Since we don’t ask for an email or phone number, we may ask you for some more information to find it.

When it’s deleted, the server erases your name, your public keys, your profile photo, your notification tokens and anything you had sent that hadn’t been delivered yet. The notice to your contacts and any encrypted content that was never delivered are deleted automatically within 24 hours at most (section 4). Server backups are deleted automatically within 8 days at most.

8. This Website

Visiting truchichat.com doesn’t tell us who you are. The website doesn’t use cookies, analytics, or fonts, videos or scripts from other companies: everything comes from our own server. Since September 30, 2026 it doesn’t keep a log of visits with your IP; logs from before then are deleted automatically after 14 days. If you open an invitation link, the code goes after the “#”, the part of the address that the browser doesn’t send: our server doesn’t see it.

If you choose a language on this website, your browser remembers it, together with a note that you have already visited, so the site doesn’t switch your language again. This is kept in your browser’s local storage, not in a cookie, and is never sent to us. You can erase it by clearing this site’s data in your browser.

9. Changes

Relevant changes are posted here and in the app. Continuing to use the app means you accept the current version.