Privacy Policy

01 Decentralized & Zero-Knowledge Architecture

Snapchain is built on decentralized Web3 protocols and cryptographic principles. We do not require personal identification, email addresses, phone numbers or passwords to access the Application.

• Private Keys & Seed Phrases: All cryptographic keys, mnemonics and seed phrases are generated and stored locally on your device using hardware-backed encryption. We never have access to, nor do we transmit or store, your private keys.
• End-to-End Encryption (E2EE): All direct messages and chat payloads are encrypted end-to-end on the sender's device and can only be decrypted by the intended recipient. We cannot read, moderate or inspect your private communications.

02 Information We Do Not Collect

• Personal Data: We do not collect your real name, physical address, email address, phone number or government IDs.
• Financial Identifiers: We do not collect traditional banking information, credit card numbers or fiat account details.
• Biometric & Sensor Data: We do not collect biometric identifiers or precise real-time GPS location.

03 Public Blockchain Data

When you initiate cryptocurrency transfers or on-chain interactions via the Application, these transactions are broadcasted directly to public blockchain networks (such as EVM-compatible chains). Public blockchain data (including wallet addresses, transaction hashes, timestamps and token amounts) is immutable, public by design and not governed by this Privacy Policy.

04 Third-Party Services

The Application relies on a minimal set of third-party infrastructure, used solely to deliver messages and keep the Application working. None of these services receive your private keys or the readable content of your messages.

• Blockchain RPC Providers (Alchemy and public RPC nodes): Used to read blockchain state and broadcast signed transactions to the Polygon network. As with any network request, these providers may process your IP address and the public wallet address involved in the request.
• Push Notifications (Google Firebase Cloud Messaging): Used to wake the Application when a new message arrives. Firebase receives a device push token. Notifications are silent wake-up signals and never contain message content, sender names or keys.
• Notification Relay (Google Cloud Run & Firestore): Our lightweight backend stores your device push token together with your public wallet address, so it knows which device to wake when a new on-chain message is addressed to you. It does not store message content, contact lists or keys.
• Encrypted Attachments (Google Cloud Storage): Photos, files and voice messages are encrypted on your device before upload. We only store the encrypted data, which we cannot decrypt. Attachments are automatically deleted 24 hours after upload.
• Technical Logs: Our infrastructure providers may temporarily process IP addresses and request metadata in server logs for security and reliability purposes.

05 Optional Cloud Backup

Cloud backup is switched off by default. If you turn it on, Snapchain uploads an encrypted copy of your keys, contacts and message history to a hidden application folder in your own cloud storage (Google Drive on Android, iCloud on iOS). We do not operate a server for this feature and we never receive the backup.

• Encrypted With Your Password: The backup is encrypted on your device with a password that only you know, derived using Argon2id. We cannot decrypt it, we cannot reset the password and we cannot recover it for you. If you lose the password, the backup is permanently unreadable.
• Your Own Storage Account: The file is written to a hidden folder that only Snapchain can access, inside your own Google or Apple account. It is governed by that provider's terms and privacy policy and counts towards your storage quota.
• A Mirror, Not An Archive: The backup reflects your current data. If you delete a chat or a contact, it also disappears from the cloud copy within a few hours. For a permanent snapshot, use the manual export to file.
• It Survives Uninstalling: Backups remain in your cloud account after you remove the Application, until you delete them. You can remove all copies at any time in Settings → Backups & Recovery → Cloud Settings → Delete Backup, or from your Google Drive settings under "Manage apps".
• Attachments Not Included: Photos, files and voice messages are deliberately excluded from the backup.

06 Website Purchases & Wallet Connection

Premium can be purchased on our website by connecting a crypto wallet. No account, name, email or card details are required.

• Wallet Connection (Reown / WalletConnect): Used to connect your wallet to the website. Reown processes your public wallet address, the network you use and technical connection data (such as your IP address) to establish the connection. We never receive your private keys or seed phrase and every transaction must be approved by you in your wallet.
• On-Chain Payments: Purchases are paid in POL directly on the Polygon blockchain. The payer address, recipient address, package, amount and time of purchase are recorded publicly on-chain, as described in the "Public Blockchain Data" section. Blockchain payments are final and cannot be reversed by us.
• No Payment Data Stored: Our website does not store your wallet address, purchase history or any payment details on our servers. The wallet session is kept only in your browser and ends when you disconnect.

07 Data Retention & Deletion

Snapchain keeps as little data as possible, for as short a time as possible:

• Local Data: Your chat history, contacts and keys reside locally on your device. You can delete all of it at any time by clearing the Application's storage or uninstalling the app.
• Cloud Backup: If you enabled cloud backup, copies are kept in your own cloud account until you delete them. Snapchain keeps at most the three most recent copies and removes older ones automatically.
• Encrypted Attachments: Automatically and permanently deleted from cloud storage 24 hours after upload, whether or not they were opened.
• Push Registration: Your push token and wallet address are kept only while needed to deliver notifications. You can request their deletion at any time via our Support page.
• No User Accounts: We do not maintain user accounts or profiles. Apart from the push registration described above, no user data is retained on our servers.
• On-Chain Data: Data written to a public blockchain (such as encrypted message payloads, wallet addresses and transactions) is permanent by design and cannot be deleted by us or by anyone else.

08 Children's Privacy

The Application is intended strictly for users aged 18 and older. We do not knowingly collect or solicit data from anyone under the age of 18.

09 Changes to This Policy

We may update this Privacy Policy from time to time. Any modifications will be reflected with an updated "Last Updated" date at the top of this page.