Dial-X Privacy Policy

Last updated: 20 August 2026

Dial-X is a private messaging app. This policy explains what we collect, what we do not collect, and the choices you have.

We have tried to write this in plain language rather than legal boilerplate, because a privacy policy nobody reads protects nobody.

1. The short version

• Your messages are end-to-end encrypted. We cannot read them.

• You sign up with an ID of your choice — a phone number is optional.

• We do not sell, share, or analyse your personal data.

• We do not build advertising profiles from your messages or contacts.

• You can delete your account at any time from inside the app.

2. Information we collect

Account information

• User ID — chosen by you. Not linked to your real name unless you choose one.

• Display name and optional profile photo, phone number and bio.

• Password — stored only as a bcrypt hash. We never see or store the password itself.

• Additional identities — if you create a second ID or link a phone number, we store those too.

Messages and media

• Message content is end-to-end encrypted on your device before it reaches our servers. We store only ciphertext and cannot read it.

• Photos, videos, voice notes and documents you send are stored on our servers so the recipient can download them. File captions and names are encrypted.

• Messages are deleted from our servers when you or the recipient delete them.

Contacts

• We store the Dial-X IDs you save as contacts, along with any name, phone number or note you enter for them.

• We do not read, upload or scan your phone's address book. Contacts are added manually, one at a time.

Location — only for Emergency SOS

• If you enable Emergency SOS, the app collects your location and sends it to the emergency contacts you have chosen.

• This happens only when you trigger SOS by holding the volume button for six seconds.

• While SOS is active, your location is sent again every 15 minutes until you stop it.

• We do not track your location at any other time, and we do not store your location history on our servers.

• The location is sent as an ordinary message to your emergency contacts. It is not shared with us or anyone else.

Calls

• We store call records — who called whom, when, and for how long — so you can see your call history.

• Call audio is never recorded or stored.

Device information

• Push notification token, so we can deliver notifications.

• Basic device identifiers and error logs for diagnosing crashes.

Nearby devices (offline mesh)

• Dial-X can relay messages device-to-device over Bluetooth and Wi-Fi Direct when there is no internet.

• This requires permission to discover nearby devices. It is used only to relay messages, and only while the app is open.

• Relayed messages stay encrypted — the relaying device cannot read them.

3. What we do NOT collect

• We do not read your messages.

• We do not upload your phone's address book.

• We do not track your location outside of Emergency SOS.

• We do not record calls.

• We do not sell your data to anyone.

• We do not build advertising profiles from your activity.

• We do not require your real name.

• We do not require a phone number to create an account.

4. How we use your information

• To deliver your messages, calls and notifications.

• To authenticate you and keep your account secure.

• To enforce one-device-at-a-time sign-in, which protects you if your phone is lost.

• To send your location to your chosen contacts when you trigger SOS.

• To diagnose crashes and improve reliability.

5. Encryption

• Messages are encrypted with AES-256 using a key unique to each conversation.

• Private keys are generated on your device and never leave it in readable form.

• Group and meeting keys are derived on your device and are never transmitted.

• Our servers store ciphertext only.

What this means: if our servers were breached, the attacker would find encrypted data they could not read.

A limitation we want to be honest about: file contents (the bytes of a photo or document) are stored without an additional encryption layer, though captions and file names are encrypted. We are working on this.

6. Automatic replies (AI)

If you enable Auto Reply, the text of incoming messages in that conversation is sent to Google's Gemini API to generate a reply.

• This is off by default and only applies to conversations where you turn it on.

• Google processes that text under its own privacy terms.

• We do not store the generated replies separately.

If you would rather no third party sees any message text, leave Auto Reply off.

7. Advertising

Dial-X may show ads in browsable lists — your chat list, contacts list, call log and meetings list.

• Ads never appear inside a conversation.

• Ads never appear during a call or meeting.

• Ads never appear near the emergency features.

• Ads are not targeted using your messages, contacts or location.

• Premium subscribers see no ads.

8. Service providers

We use these providers to run the service. Each processes only what is needed:

Provider

What it handles

Supabase

Database, file storage, real-time delivery

Google Firebase

Push notifications, phone number verification (OTP)

LiveKit

Voice call connections

Google Gemini

Auto Reply, only if you enable it

Google Drive

Chat backup, only if you enable it — encrypted before upload

We do not sell or rent your data to anyone.

9. How long we keep data

• Messages — until you or the recipient delete them.

• Media files — deleted when the message is deleted; orphaned files are purged automatically each week.

• Call records — until you delete them.

• Meeting messages — deleted automatically after the meeting ends.

• Account data — until you delete your account.

Inactive accounts

If you do not sign in for 13 months, your account and all its data

are automatically deleted.

Signing in at any point resets this — there is nothing else you

need to do.

10. Deleting your account

You can delete your account from Settings → Delete Account inside the app.

This permanently removes your profile, messages, contacts, groups and media from our servers. It cannot be undone.

If you cannot access the app, email dialx.developer@gmail.com from the address linked to your account and we will process the deletion.

11. Your choices

• Location — deny the permission. Only Emergency SOS is affected.

• Nearby devices — deny the permission. Only offline mesh is affected.

• Notifications — deny the permission. Messages still arrive when the app is open.

• Phone number — optional. You can use Dial-X without one.

• Auto Reply — off unless you turn it on.

• Backup — off unless you turn it on.

12. Children

Dial-X is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child has created an account, contact us and we will remove it.

13. Security

• Passwords are hashed with bcrypt.

• All connections use TLS.

• Every database table enforces row-level access control, so one user's data is not reachable by another.

• Signing in on a new device immediately ends the session on the old one.

No system is perfectly secure. If you discover a vulnerability, please report it to dialx.developer@gmail.com rather than disclosing it publicly, and we will address it.

14. International users

Our servers are located in Asia (Tokyo region). By using Dial-X you consent to your data being processed there.

15. Changes to this policy

If we make material changes, we will update the date at the top and notify users in the app.

16. Contact

Muhammad Naseer Email: dialx.developer@gmail.com

For privacy questions, data deletion requests, or security reports.