This Privacy Policy explains how Tox Messenger (“we”, “us”, “the Service”) processes information when you use our apps and services at toxmessenger.app (including relay.toxmessenger.app).
Contact: privacy@toxmessenger.app
1. Why privacy matters
Private messaging protects journalists, families, dissidents, patients, and ordinary people who simply do not want every relationship monetized. Privacy is not about hiding wrongdoing — it is about human dignity and control. We build for that principle.
2. What never belongs on our servers
- Text of messages and reactions
- Voice/video call media (E2E / P2P)
- Your raw Tox ID (we use hashes where an identifier is needed)
- A readable archive of who said what to whom
3. Information we may process
| Category | Examples | Why |
|---|---|---|
| Identity hashes | SHA-256 of Tox ID | Devices, presence, wake-ups, abuse controls |
| Device tokens | FCM / APNs, device id, app version | Wake the app when a peer needs you |
| Presence | Short-TTL online markers | Decide if a wake-up is needed |
| Logs | IPs, status codes, paths | Security and reliability |
| Support mail | What you email us | Help you |
| Crypto donations | Public blockchain transactions you send | Voluntary funding (on-chain, not via our message servers) |
4. We do not sell personal data
We do not sell your personal information. We do not run advertising SDKs that profile your chats for third parties. Optional cryptocurrency donations are a way to fund privacy without becoming the product.
5. Legal bases (GDPR where applicable)
- Contract — provide the Service
- Legitimate interests — security, abuse prevention
- Consent — OS permissions you grant
- Legal obligation — valid lawful requests
6. Push providers
Wake-ups may use Google FCM and/or Apple APNs. They process device tokens under their policies. Payloads are designed to avoid message content.
7. Retention
- Presence — seconds to minutes
- Device registration — until removed or invalid
- Server logs — days to weeks typically
- Support emails — as needed to resolve requests
8. Your rights
You may request access, correction, or deletion of personal data we hold (mostly operational metadata). Chat content is primarily controlled on-device. Email privacy@toxmessenger.app.
9. Children
Not directed to children under 13 (or higher local digital age).
10. Changes & contact
We may update this page and change the date above.
- Privacy: privacy@toxmessenger.app
- Support: support@toxmessenger.app