Privacy Policy

1. Our Privacy Commitment

Cipher is designed with privacy at its foundation. Unlike traditional messaging platforms, we:

• Do not require phone numbers or email addresses for account creation
• Cannot read your messages due to end-to-end encryption
• Do not store your private keys or seed phrases
• Do not sell or share your data with third parties
• Do not track your location or browsing habits

2. Information We Collect

Due to our privacy-first architecture, we collect minimal information:

2.1 Public Key Information

Your public cryptographic key is used to facilitate message delivery and wallet functionality. This key does not reveal your identity or personal information.

2.2 Encrypted Message Metadata

We temporarily store encrypted message metadata to enable message delivery. This data is encrypted and cannot be read by Cipher or any third party.

2.3 Usage Analytics (Optional)

With your explicit consent, we may collect anonymized usage statistics to improve the application. This is entirely optional and can be disabled at any time.

3. Information We Never Collect

• Your private keys or seed phrase
• The content of your messages
• Your real name or identity
• Phone numbers or email addresses
• Location data
• Contact lists
• Browsing history

4. End-to-End Encryption

All messages sent through Cipher are protected by end-to-end encryption. This means:

• Messages are encrypted on your device before transmission
• Only the intended recipient can decrypt and read messages
• Cipher servers cannot access message content
• No backdoors or master keys exist

5. Self-Custody Wallet

Your cryptocurrency wallet in Cipher is entirely self-custodial:

• Private keys are generated and stored locally on your device
• Cipher never has access to your private keys
• You are solely responsible for backing up your seed phrase
• Lost seed phrases cannot be recovered by Cipher

6. Data Retention

We retain minimal data and only for as long as necessary:

• Encrypted messages are stored only until delivered, then deleted from our servers
• Public key information is retained while your account is active
• Account deletion removes all associated data from our systems

7. Third-Party Services

Cipher interacts with blockchain networks for wallet functionality. These interactions are:

• Publicly visible on the respective blockchain (as with all blockchain transactions)
• Not linked to your Cipher identity by us
• Subject to the privacy characteristics of each blockchain

8. Your Rights

You have the right to:

• Export your data at any time
• Delete your account and associated data
• Opt out of optional analytics
• Use the service without providing personal information

9. Security Measures

We implement industry-leading security practices:

• Regular security audits by independent firms
• Open-source code for transparency
• Bug bounty program for responsible disclosure
• Encrypted data transmission and storage

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of any significant changes through the application. Your continued use of Cipher after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this privacy policy or our privacy practices, please contact us through our official channels or GitHub repository.