Overview
This Privacy Policy explains what information Backchat collects, where it is stored, and how it is used. It is written for the app and download site in their current state as of the effective date below.
Information you provide
Depending on which features you use, Backchat may store:
- Your username and normalized username.
- Your recovery email address for username-based account recovery.
- Your avatar URL and profile quote if you choose to set them.
- Contact relationships you create inside the app.
Messages, call data, and local history
- Message history and unread counts are cached locally on each device or computer using the app.
- The current backend stores message ciphertext and basic delivery metadata such as sender, recipient, timestamps, and client message IDs.
- Voice and video calling uses WebRTC-style signaling. The backend stores call session records and signaling events needed to set up calls.
- Call media is intended to use direct peer-to-peer paths where possible, but call setup still requires signaling and network metadata.
Session, security, and technical data
- Session tokens are issued for signed-in users and stored server-side as token hashes.
- Presence information is derived from session activity timestamps.
- If social sign-in is enabled in the future, Backchat may store provider identity data, profile data, and OAuth tokens needed for that feature.
Website and download hosting
The public download site is hosted on GitHub Pages and release files are hosted on GitHub Releases. GitHub may collect standard web server and download request information such as IP address, user agent, request timestamps, and referrer data under GitHub's own terms and privacy practices.
How information is used
- To create and recover username-based accounts.
- To display your profile, presence, and contact list.
- To route encrypted messages and call signaling between users.
- To keep local conversation history and unread counters on your device.
- To provide download pages and release assets.
Sharing
Backchat does not sell your personal information. Data may be processed through infrastructure providers used to operate the project, including GitHub for the public site and releases and AWS for the hosted API.
Retention
Local chat history stays on the device where it was stored unless you remove it locally. Server-side records may remain until deleted, rotated, or removed as part of maintenance or account cleanup.
Your choices
- You can choose whether to set an avatar URL or profile quote.
- You can decide whether to install and keep local conversation history on a given device.
- You can stop using the app at any time.
No special-category or emergency use promise
Backchat is not offered as a medical, legal, financial, child-directed, or emergency communications service. Do not rely on it for emergencies or safety-critical communication.
Contact
For project or privacy questions, use the GitHub repository issue tracker unless and until a dedicated support address is published.