Privacy policy
Secret Call for iPhone and Android. Last updated 2 October 2026.
Secret Call is a messenger built so that we cannot read what you send. There are no phone numbers, no names on our servers, no analytics, no ads and no tracking. This page says exactly what our servers can and cannot see.
What is encrypted so that we cannot read it
- Messages, photos, files, voice messages, names and profile pictures are encrypted end to end on your phone (the MLS standard, RFC 9420) before they leave it. Only the people in the chat hold the keys.
- Calls and video are encrypted between the two phones (DTLS-SRTP). They pass through our relay servers (TURN), so the two phones never connect to each other directly; our servers forward encrypted packets they cannot open.
- Backups are encrypted with a key derived from your 12-word recovery phrase. They are stored where you choose (your iCloud Drive on iPhone, or a file you keep) and never on our servers.
- Names you give your contacts stay on your phone and in your encrypted backup.
- Your recovery phrase can, if you leave the switch on, also be kept in Apple's iCloud Keychain or Google's Block Store, encrypted by Apple or Google so that neither they nor we can read it; it never reaches our servers. You can turn this off in Settings → Recovery phrase.
What our servers see
| Server | What it sees | How long it keeps it |
|---|---|---|
| Relay (chats) | Your account's public key and the encrypted chat events your phone sends and receives (their size and time, not their content). | Encrypted chat events: 45 days, then deleted. Your public key and the keys others need to start a chat with you: until you delete your account. |
| File server | Encrypted files (photos, voice messages, documents), their size and time of upload. | 90 days after the file was last fetched, or until the sender deletes the message for everyone or deletes their account. |
| Call relay (TURN) | The encrypted call traffic it forwards and its amount. Not the sound or the picture. | Nothing is kept after the call. |
| Notifications | Your phone's token for Apple's or Google's push service, encrypted so that only our notification server can read it. Your phone shares it, encrypted, inside your chats, so that the other phones can ask our server to wake yours. The wake-up carries no message content and no names — your phone fetches and decrypts the message itself. | Not stored by the server, except a fingerprint of each request for 5 minutes to drop repeats. The other phones in your chats keep the encrypted token until you leave the chat. |
Other companies involved
- Apple and Google deliver the wake-up notifications (Apple Push Notification service, Firebase Cloud Messaging). They learn that your device received a notification, not what it is about.
- Subscriptions are sold and managed by the App Store or Google Play. We do not receive your payment details or receipts; the app checks your subscription on the phone.
- Backups in iCloud Drive are governed by Apple's terms. The files are encrypted.
- Our servers are rented virtual machines (currently at DigitalOcean, Amsterdam). The provider runs the hardware, not the software or the data.
What we never do
- We have no directory of users and no contact search: people find you only through your QR code or invite link.
- We do not sell or share data, do not show ads and do not use analytics or tracking SDKs.
- We cannot read your messages or listen to your calls, and so cannot hand them to anyone.
Your choices
- Delete your account at any time in the app: Settings → Delete account. See what is deleted.
- Choose where backups go, or turn them off, in Settings → Backup.
- Choose what notifications show on the lock screen in Settings → Notifications.
- Block anyone in a chat; blocked people cannot reach you.
Children
Secret Call is not directed at children under 13.
Changes
If this policy changes, the new version appears here with a new date. Questions or requests: write to us.
Contact: salikhov829@gmail.com