Privacy policy
Last updated 9 October 2026
This describes what JessChat actually stores and who can see it. Where something is a limitation rather than a protection, it says so.
What we collect
What you give us to have an account
| Data | Why |
|---|---|
| Email address | To identify the account, to verify it is yours, and to reset a password. |
| Username and display name | So other people can find you and know who they are talking to. |
| Password | Stored only as a hash. We cannot read it and cannot tell you what it is. |
| Profile photo and bio | Optional. Visible to people you talk to. |
What you send
Messages, photos, videos, voice messages, files, and reactions. These are stored on our servers so they can be delivered to the people you sent them to and so they are still there when you open the app on another device.
What the service records as you use it
| Data | Why |
|---|---|
| Device name, model and platform | So you can see your signed-in devices and end a session you do not recognise. |
| A device identifier we generate | To tell one of your devices from another, so a notification goes to the right one and so ending a session ends the right session. It is ours, it is not the advertising identifier, and it is not shared. |
| IP address of a session | The same, and for detecting abuse. |
| When a session was created and last used | To expire it, and to show it to you. |
| Notification token | To deliver a message or call notification to your device. |
| Which calls you took part in, and for how long | To show call history. Call audio and video are not recorded. |
| Storage used | So you can see how much you are storing, and so we can plan capacity. There is no per-account limit. |
What you send to support
If you write to support, privacy or security, we keep that correspondence — your message, your address, and our reply — so the conversation makes sense and so an appeal can be reviewed by somebody who was not involved the first time.
What we do not collect
No location. No phone number — JessChat never asks for one. No contacts or address book — JessChat finds people by username, and never reads your phone’s contacts. No advertising identifier, and no health, financial, biometric or browsing data. No third-party analytics or advertising SDK. We do not build a profile of you for advertising, we do not share anything with a data broker, and we do not sell data to anybody.
What the App Store privacy label says
The App Store shows a privacy label for every app, chosen from Apple’s own fixed list of data types. Apple’s names are broader than ours, so this is the same information in their vocabulary, so the two cannot quietly drift apart.
| Apple’s data type | What it is here |
|---|---|
| Name | Your display name. |
| Email address | The address the account is registered to. |
| User ID | Your username and the account identifier it maps to. |
| Device ID | The device identifier described above. Not the advertising identifier. |
| Emails or text messages | The messages you send and receive. |
| Photos or videos | Photos and videos you send, and your profile photo. |
| Audio data | Voice messages you send. Call audio is never recorded. |
| Other user content | Your bio, files you send, and reactions. |
| Customer support | What you write to us, and our reply. |
| Product interaction | Call history, which conversations you have opened, read state, and online status. |
| Other data | The session IP address, device name and model, and your storage usage. |
Three things are true of every row:
-
It is collected only to make the app work — to deliver a message, ring a phone, show you your sessions, enforce a limit, or answer a support request. None of it is collected for advertising, marketing, or analytics about you.
-
It is linked to your account, because an account is the whole point of it. We do not pretend any of it is anonymous.
-
None of it is used for tracking. We do not combine it with data from other companies’ apps or websites, we do not share it with a data broker, and the app contains no advertising SDK. JessChat will never show the tracking-permission prompt, because there is nothing to ask for.
How it is protected, stated plainly
JessChat is not end-to-end encrypted. Traffic between your device and our servers is encrypted in transit (HTTPS and TLS), and data is encrypted at rest by our hosting providers. But messages are stored in a form our servers can read, which is what allows them to be delivered to your other devices and to the people you send them to.
This is stated because the alternative — implying more protection than exists — would change what you choose to send. If you need end-to-end encryption, JessChat does not currently provide it.
Practically, this means our operational staff could access message content stored on our infrastructure. Our administrative tools are built so they do not: the moderation dashboard has no ability to open a conversation, read a message, or listen to a call, and the only message content a moderator can see is content a user chose to attach to a report about it. That is a deliberate limit on the tools, and it is enforced by the server, not by the dashboard.
Who else sees your data
| Who | What | Why |
|---|---|---|
| People you message | What you send them, your display name, username and photo | That is the product. |
| Our hosting and infrastructure providers | Data at rest and in transit on their systems | To run the service. They act on our instructions and do not use it for their own purposes. |
| Apple and Google push services | A notification token and the notification payload | To deliver notifications. If you turn off message previews, the notification carries no message text. |
| Our support and moderation staff | Account details, safety reports, and the audit record of their own actions — never conversations | To answer support requests and act on reports. |
| Law enforcement | Only what a valid legal order requires | We do not volunteer data, and we tell you unless we are legally prohibited. |
How long it is kept
While your account exists, your data stays. When you delete your account most of it is erased immediately — see deleting your account for the full list, including the two things that are kept deliberately (safety reports and our administrative audit log) and why.
Messages you sent remain in the conversations of the people you sent them to, attributed to a deleted account. Those people can delete their own copies.
Your choices
-
See your signed-in devices and end any session, from Settings.
-
Turn off notification previews, so a notification says a message arrived without showing what it says.
-
Hide your online status.
-
Block anybody, which stops them messaging or calling you.
-
Get a copy of your data by emailing us before you delete your account.
-
Delete your account from inside the app, at any time.
Children
JessChat is not for people under 13, and we do not knowingly collect data from them. If you believe a child under 13 has an account, email us and we will delete it.
Where data is processed
Our servers and storage are operated by infrastructure providers whose facilities may be in a different country from yours. Where the law requires a transfer mechanism for that, we rely on our providers’ standard contractual clauses.
Changes
If we change this policy in a way that affects what we collect or who sees it, we will say so in the app before the change takes effect. The date at the top always reflects the current version.
Contact
[email protected] for anything about this policy, including a request to access, correct, or delete your data.