0. Ownership
The toxmessenger.app website, mobile applications (including Android and iOS builds distributed under the Tox Messenger name), related domains (such as relay.toxmessenger.app), and associated software and services belong to REDEMPTIO CORP. All rights in those applications and the Service, except for third-party and open-source components under their own licenses, are held by REDEMPTIO CORP.
This Privacy Policy explains how REDEMPTIO CORP (“we”, “us”, “the Service”), operating Tox Messenger at toxmessenger.app, processes information when you use our apps and services (including relay.toxmessenger.app).
Contact: privacy@toxmessenger.app
1. Why privacy matters
Private messaging protects journalists, families, dissidents, patients, and ordinary people who simply do not want every relationship monetized. Privacy is not about hiding wrongdoing — it is about human dignity and control. We build for that principle.
2. What never belongs on our servers
- Text of messages and reactions
- Voice/video call media (E2E / P2P)
- Your raw Tox ID (we use hashes where an identifier is needed)
- A readable archive of who said what to whom
3. Information we may process
| Category | Examples | Why |
|---|---|---|
| Identity hashes | SHA-256 of Tox ID | Devices, presence, wake-ups, abuse controls |
| Device tokens | FCM / APNs, device id, app version | Wake the app when a peer needs you |
| Presence | Short-TTL online markers | Decide if a wake-up is needed |
| Logs | IPs, status codes, paths | Security and reliability |
| Support mail | What you email us | Help you |
| Crypto donations | Public blockchain transactions you send | Voluntary funding (on-chain, not via our message servers) |
4. We do not sell personal data
We do not sell your personal information. We do not run advertising SDKs that profile your chats for third parties. Optional cryptocurrency donations are a way to fund privacy without becoming the product.
5. Legal bases (GDPR where applicable)
- Contract — provide the Service
- Legitimate interests — security, abuse prevention
- Consent — OS permissions you grant
- Legal obligation — valid lawful requests
6. Push providers
Wake-ups may use Google FCM and/or Apple APNs. They process device tokens under their policies. Payloads are designed to avoid message content.
7. Retention
- Presence — seconds to minutes
- Device registration — until removed or invalid
- Server logs — days to weeks typically
- Support emails — as needed to resolve requests
8. Your rights
You may request access, correction, or deletion of personal data we hold (mostly operational metadata). Chat content is primarily controlled on-device. Email privacy@toxmessenger.app.
9. Children
Not directed to children under 13 (or higher local digital age).
10. Changes & contact
We may update this page and change the date above.
- Privacy: privacy@toxmessenger.app
- Support: support@toxmessenger.app