NoTrack Messenger ("NoTrack") is run by Kung Fu Giraffe, LLC ("we", "us"). Contact: support@no-tracking.app.
The short version
- We can't read your messages. Messages, photos, group names and group categories are end-to-end encrypted — locked on your phone and unlocked only on your recipients' phones.
- No phone number. You sign up with an email address and a username.
- No address-book upload, no location, no ads, no tracking, no selling data. NoTrack contains no advertising or analytics code.
- We keep as little as possible, for as short a time as possible. Encrypted messages are deleted from our servers once they're delivered.
What we store, and why
| What | Why | How long |
|---|---|---|
| Email address | To send you login codes and identify your account | Until you delete your account |
| Username | So people can find and add you | Until you delete your account |
| First and last name (optional) | Shown only to your contacts — never searchable | Until you change it or delete your account |
| Your public encryption keys | So others' phones can lock messages for you. Your private keys never leave your phone | Until you delete your account |
| Contacts, contact requests and blocks | To decide who can message you | Until changed or you delete your account |
| Group memberships and admin roles | To deliver group messages. Group names, categories and members' category values are encrypted and we can't read them | Until you leave the group or delete your account |
| Encrypted messages | To deliver them to recipients who are offline | Deleted as soon as they're delivered; at most 90 days if never delivered |
| Encrypted photos | To deliver them | Deleted once every recipient has downloaded them; at most 30 days |
| Login codes | To sign you in | Stored scrambled; expire after 10 minutes |
| Login sessions (one per phone) | To keep you signed in | Until you log out, sign in on another phone, or delete your account |
| Reports | When someone reports a person or group: the reason, details, and any messages the reporter chose to include | Up to 1 year |
| Account creation date | Normal record keeping | Until you delete your account |
Your birth month and year are asked once at sign-up to confirm you're at least 13. They are checked and not saved. Your phone remembers only that the check passed.
Internet (IP) addresses are used briefly to connect your phone and to limit abuse (for example, too many login attempts). They are kept in short-lived memory, not written to logs, and are not linked to your account.
What we don't collect
- Message or photo contents (we can't read them)
- Your phone number or address book
- Your location — photos are sent with their location and camera details removed
- Advertising identifiers, browsing activity, or data from other apps
- Analytics or crash data from third-party services
Who we share data with
We do not sell or rent your information, and we don't share it for advertising.
We use a few service providers to run NoTrack. They handle only what's needed to provide their service:
- Hosting — our server and database run on a cloud server provider.
- Email — our email host sends login codes and receives support email.
- Photo storage — encrypted photos are stored with Cloudflare until delivered. Cloudflare can't open them.
Law enforcement: we disclose information only when required by valid legal process. Because of end-to-end encryption, we cannot provide message or photo contents. What we could provide is limited to the items in the table above.
Data on your phone
- Your chats are stored on your phone, not on our servers.
- Keep messages (Settings → Privacy) controls how long your phone keeps them: 30 days, 3 months (default), 1 year, or forever.
- iCloud Backup: by default, chats are left out of your iPhone's iCloud Backup. If you turn on "Include chats in iCloud Backup", Apple stores that backup under Apple's terms, and unless you've turned on Apple's Advanced Data Protection, Apple can access it.
- Your private encryption keys are stored in your iPhone's Keychain.
Your choices
- Change your name in Settings → Name, or remove it.
- Block anyone; mute chats; leave groups.
- Delete your account in Settings → Delete account. This immediately deletes your account and everything in the table above that's linked to it — except reports, which are kept (with the reported username) for up to a year so they can still be reviewed.
- Questions or requests: email support@no-tracking.app. Depending on where you live, you may have rights to access or delete your information; we'll honor them.
Children
NoTrack is not for children under 13. We don't knowingly collect information from anyone under 13. If we learn that a child under 13 has an account, we will delete it. Parents who believe their child under 13 has an account can contact support@no-tracking.app.
Security
Messages and photos are end-to-end encrypted. Connections to our server use encryption (HTTPS). Login codes and session tokens are stored scrambled (hashed). No system is perfectly secure, but we design NoTrack so that a breach of our servers would not expose your messages.
Changes to this policy
If we make significant changes, we'll tell you in the app before they take effect.
Contact
support@no-tracking.app Kung Fu Giraffe, LLC, Pennsylvania.