English

Last updated: 29/07/2026

This Privacy Policy describes how ChaTor (“the App”) processes personal data in accordance with Regulation (EU) 2016/679 (“GDPR”). The App is developed by ChaTor Team (“we”).

ChaTor Team does not process users’ personal data as a Data Controller, because no personal data is transmitted, stored or accessible by us. All data remains exclusively under the user’s control on their own device.

For any questions or requests regarding privacy or your rights, you can contact us at: chator.team@gmail.com.

1. Data Controller

The Data Controller is:

ChaTor Team – independent developers.

Contact: chator.team@gmail.com.

There is no separate legal address because no personal data is processed on servers controlled by us.

2. The principle behind ChaTor

ChaTor is designed to collect the absolute minimum. There is no central server that manages accounts, messages or contacts: the app communicates directly from device to device over the Tor network, and all data remains encrypted on your phone.

3. Data we do NOT collect

No registration: no phone number, email or name is required to use the app.
No server-side accounts: there is no central user database managed by us.
No advertising tracking or analytics: the app does not integrate advertising SDKs, profiling tools or behavioural analysis.
No access to message content: messages are end-to-end encrypted (see section 5) — even we, as developers, cannot read them even if we wanted to.

4. Data stored on your device

The following information exists only locally on your phone, is encrypted, and is never transmitted to us:

Messages and conversations: stored in an encrypted database (SQLCipher), with the key protected by the device hardware (Android Keystore).
Contacts: the name you assign, onion address, and the contact’s cryptographic keys — stored locally.
Cryptographic keys: your digital identity (Ed25519) and session keys (X25519, Double Ratchet state) are generated on the device and encrypted at rest before being saved.

If you uninstall the app or clear its data, this information is permanently deleted (except for any backups you may have configured at the operating system level).

Warning about system backups: if you enable automatic system backups (Google Backup, iCloud, etc.), the encrypted data of the App may be included in the backup and therefore leave the device. ChaTor does not control and has no access to these backups.

5. How communication works

Each device exposes its own onion address (Tor network) and communicates directly with the other device, without passing through any intermediate server managed by us.
Every message is end-to-end encrypted before leaving the device (Olm/Double Ratchet protocol) and digitally signed (Ed25519) to guarantee authenticity.
Transparency regarding the Tor network: as with any use of Tor, the entry node of the network can observe the IP address of your device (but not the final destination or the content); subsequent nodes route the traffic without knowing either the origin or the content. This is how the Tor network itself works, not data collection by us.

6. Legal basis for processing (Art. 6 GDPR)

Since no personal data is transmitted or accessible by ChaTor Team, no processing of personal data takes place on our part.

Local processing of data on your device is carried out under your control and is necessary for:

Art. 6(1)(b) – Contract: providing the messaging service.
Art. 6(1)(f) – Legitimate interest: ensuring security, encryption and proper functioning of the App.

We do not use the data for marketing, profiling or advertising.

7. Permissions required by the App

Internet: necessary to connect to the Tor network.
Foreground service: necessary to keep the Tor connection active in the background. This service displays a persistent system notification (required by Android) indicating that the Tor connection is active.
Notifications: necessary to alert you of new messages. Notifications are configured in “secret” / private mode: they do not show the message content or the sender’s name on the lock screen or in the notification bar (only a generic new message alert).
Biometrics / screen lock: necessary to protect access to the App.

We do not request access to the contact list, camera, microphone or location, except for specific features that you choose to use.

8. Sharing of data with third parties

We do not share, sell or transfer any personal data to third parties. The App does not integrate advertising, tracking or analytics SDKs.

9. International transfers

ChaTor does not transfer personal data outside your device. We do not send data to EU or non-EU countries.

10. Data retention

All data is stored only on your device and remains there for as long as you decide to keep it.

You can delete:

individual messages
entire conversations
contacts
all data by uninstalling the App

We do not keep copies of your data.

11. Security

ChaTor implements advanced security measures:

encrypted database (SQLCipher, AES-256)
keys protected by Android Keystore
no export of keys in clear text
blocking of screenshots and screen recording
contact identity verification via “safety number”

No system is completely secure: protection also depends on your device and your habits.

12. Your rights (Art. 15–22 GDPR)

You have the right to:

access your data
rectify your data
erase your data
restrict processing
object to processing
obtain data portability

Since all data is on your device, you can exercise these rights directly by:

deleting messages or contacts
uninstalling the App

You also have the right to lodge a complaint with the competent data protection supervisory authority in your country of residence.

For assistance, you can contact us at chator.team@gmail.com.

13. Minors

The App is not intended for children under the age of 14. We do not knowingly collect data from minors.

14. Changes to this Privacy Policy

We may update this Privacy Policy periodically. Changes will be published with a new “last updated” date inside the App (Settings / Privacy section) and/or on the official website. By continuing to use the App after the update date, you accept the new version.

15. Contact

For questions or requests related to the GDPR, you can contact us at:

ChaTor Team

Email: chator.team@gmail.com

Page updated

Google Sites

Report abuse