End-to-End Encrypted
Your messages and media are readable only by you and the intended recipient.
Zero Data Selling
We never monetize, rent, or trade your personal information to advertisers.
Total User Autonomy
Export or permanently delete your account data at any time with one click.
1. Introduction & Core Privacy Principles
At Messagea, we believe that private communication is a fundamental human right. This Privacy Policy details our practices concerning the collection, use, protection, and disclosure of information when you use the Messagea messaging web application, mobile apps, and associated services.
By creating a Messagea account or accessing our services, you consent to the information handling practices described in this policy. We operate under strict privacy-by-design principles: minimal data collection, strict security enforcement, and complete user transparency.
2. Information We Collect
We categorize the information collected into three distinct types:
A. Account & Profile Information
- Phone Number or Email: Used exclusively for authentication, account security, and password resets.
- Display Name & Profile Photo: Custom display metadata stored encrypted to identify you to your contacts.
- Status Messages: Optional status text you choose to display.
B. Message Content & Media
All message content (text, voice notes, photos, videos, documents) is end-to-end encrypted using Signal-derived protocol specifications prior to leaving your local device.
- Message contents cannot be deciphered or read by Messagea servers or staff.
- Undelivered messages are held in encrypted transient buffers for up to 30 days before automatic deletion.
C. Technical & Diagnostic Logs
- Device & OS Info: OS version, browser build, screen dimensions for display optimization.
- Crash Reports: Anonymized stack traces to resolve application bugs.
- Connection Logs: IP address and connection timestamps stored temporarily to prevent abuse and DDoS attacks.
3. How We Use Your Information
We process personal information only for legitimate operational and service reasons:
Service Operations
To establish instant messaging routes, process calls, and sync chats across your authorized devices.
Security & Abuse Protection
Detecting spam botnets, unauthorized login attempts, and malicious infrastructure probes.
Essential Communications
Sending security verification codes, system maintenance notices, and policy update notifications.
Feature Improvements
Analyzing anonymized usage patterns to improve application speed and reliability.
4. End-to-End Encryption & Security Architecture
Messagea implements modern cryptographic standards to guarantee communication privacy:
- Cryptographic Protocol: Curve25519, AES-256, and HMAC-SHA256 primitives guarantee message confidentiality and authenticity.
- Local Key Generation: Encryption keys are generated on your local device. Private keys never touch Messagea servers.
- Forward Secrecy: Ephemeral ratcheting keys ensure that even if a single key were compromised, historical messages remain unreadable.
5. Data Sharing & Third-Party Processors
We do not sell, rent, or trade personal data. We engage vetted cloud infrastructure providers solely to host servers and route network traffic:
| Processor / Service | Purpose | Data Handled |
|---|---|---|
| Cloud Hosting (Firebase / GCP) | Encrypted database & authentication routing | Encrypted account metadata & push tokens |
| Push Notification Gateway (Apple APNs / Google FCM) | Delivering incoming message alerts | Encrypted alert payloads & device tokens |
6. Data Retention & Account Deletion
You hold full rights to purge your presence from Messagea:
- Account Deletion: Initiating an account deletion permanently deletes your profile, keys, and contact links from our databases within 24 hours.
- Transient Messages: Delivered messages are removed from server memory immediately after receipt confirmation.
7. Your Global Privacy Rights
Regardless of your geographical residence (including EU/EEA under GDPR or California under CCPA/CPRA), Messagea grants all users:
- Right to Access: Request a copy of your account record.
- Right to Erasure: Delete your account and associated server records.
- Right to Data Portability: Export your local message history in standard formats.
8. Children’s Privacy Notice
Messagea is not directed toward children under 13 years of age (or 16 in certain EEA jurisdictions). We do not knowingly collect personal information from children. If we discover a minor has created an account, the profile is immediately terminated.
9. Contact Us & Data Protection Officer
For questions or requests regarding this Privacy Policy or our security practices, contact our Data Protection Team:
Messagea Privacy & Security Office
Email: privacy@messagea.com
Legal Inquiries: legal@messagea.com
Response SLA: Within 48 hours for privacy requests