VelesChat
Last updated: July 3, 2026
This policy describes how the mobile app VelesChat (the "App") processes data. VelesChat is a peer-to-peer messenger — we do not operate a central server that stores your messages.
1. Data controller
The controller under GDPR is the owner of the VelesChat project. Contact: contact@veleschat.com.
2. What data we process
2.1. Data stored locally on your device
- contacts you add (e.g. name, identifier, optional .onion address),
- chat message history,
- cryptographic keys used for end-to-end encryption,
- app settings (e.g. Tor preferences, SOCKS5 proxy).
This data stays on your device and is not automatically sent to us or to external cloud operated by VelesChat.
2.2. Data sent between devices
During a conversation, the App sends encrypted messages, call signals, and — during voice/video calls — audio and video streams directly to your contact's device (local network or Tor). Conversation content is not read or archived on a VelesChat server, because no such server exists.
2.3. Android permissions
The App may request access to:
- camera and microphone — video and voice calls,
- network — communication with contacts on LAN and through Tor,
- Wi‑Fi network location (if required by the system) — discovering devices on LAN,
- camera / QR scanner — adding contacts via QR code.
Permissions are used only for features described in the App.
2.4. The veleschat.com website
This website is static. We do not use our own tracking cookies or forms that collect personal data. Standard hosting logs (IP address, request date) may be processed by the hosting provider under its own policy.
3. Legal basis (GDPR)
- Art. 6(1)(b) — performance of contract / providing App features,
- Art. 6(1)(f) — legitimate interest (security, product development),
- Art. 6(1)(a) — consent when required by the system (e.g. permissions).
4. Data sharing
We do not sell or rent user data. Conversation data goes only to contacts you choose. Using Tor means traffic is routed through Tor network nodes according to that network's rules.
After publication on Google Play, Google may process data related to app distribution under its own privacy policy.
5. Retention period
You keep local data as long as you use the App. You can delete it by uninstalling the app or clearing app data in Android settings.
6. Your rights
You have the right to:
- access your data,
- rectification,
- erasure,
- restriction of processing,
- data portability,
- object to processing,
- lodge a complaint with a supervisory authority.
For GDPR matters, email: contact@veleschat.com.
7. Security
We use end-to-end encryption for messages. Connections through Tor increase routing anonymity but do not replace responsibly adding trusted contacts. No solution guarantees absolute security.
8. Children
The App is not directed at children under 13. We do not knowingly collect children's data.
9. Policy changes
We may update this policy. A new version will be published at https://veleschat.com/privacy.html with the update date.
10. Contact
Email: contact@veleschat.com
Website: https://veleschat.com