Last updated: September 11, 2026
Xypher-Chat ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our encrypted messaging application. By using Xypher-Chat, you agree to the practices described below.
Xypher-Chat accounts are username-only. We never collect phone numbers or email addresses. You choose a unique username and password at registration — no phone number, no email, no personally identifiable contact information is required or stored.
Your messages are end-to-end encrypted directly in the app. Message content is encrypted on your device before transmission using AES-256-GCM, with encryption keys derived per conversation using PBKDF2. Even we cannot read your conversations — only participants with the correct passcode can decrypt them.
We store a random device ID in your browser's localStorage to enforce single-device session security. This identifier is randomly generated and contains no personal information. It allows us to detect when your account is accessed from a new device.
When a login occurs from an unrecognized device, we record a security event and show you an in-app alert the next time you open the app. We never contact you by email or SMS — all security notifications are delivered in-app only.
The Corporate section allows businesses to create public profiles. We store only the business information you voluntarily submit — such as business name, industry, description, website, location, and opening hours. No additional personal data is collected when you create a business profile.
Premium and Business subscriptions are processed via Stripe, our payment provider. Stripe handles all payment details securely — we never see or store your card number, CVV, or other payment details. We only receive confirmation of your subscription status and expiration date from Stripe.
We do not collect or store:
You may request account deletion at any time. Deleting your account removes your profile, credentials, and all associated messages. You can trigger this from the in-app Settings screen using the self-destruct feature, or by contacting us through the in-app feedback channel.
Xypher-Chat is not intended for use by children under the age of 13 (or 16 where required by local law). We do not knowingly collect data from anyone below the applicable age. If you believe a minor has provided us with information, please contact us and we will take steps to delete it.
If you have questions or concerns about this Privacy Policy or your data, you can reach us through the in-app feedback channel in Settings, or by emailing us at support@xypher-chat.com.