Legal

Privacy Policy

Last updated:

This Privacy Policy explains how Snapchain ("we", "us" or "our") handles user data when you use the Snapchain mobile application (the "Application").

No personal data

No name, email or phone number.

Keys stay on device

We never see your private keys.

End-to-end encrypted

We cannot read your messages.

01 Decentralized & Zero-Knowledge Architecture

Snapchain is built on decentralized Web3 protocols and cryptographic principles. We do not require personal identification, email addresses, phone numbers or passwords to access the Application.

  • Private Keys & Seed Phrases: All cryptographic keys, mnemonics and seed phrases are generated and stored locally on your device using hardware-backed encryption. We never have access to, nor do we transmit or store, your private keys.
  • End-to-End Encryption (E2EE): All direct messages and chat payloads are encrypted end-to-end on the sender's device and can only be decrypted by the intended recipient. We cannot read, moderate or inspect your private communications.

02 Information We Do Not Collect

  • Personal Data: We do not collect your real name, physical address, email address, phone number or government IDs.
  • Financial Identifiers: We do not collect traditional banking information, credit card numbers or fiat account details.
  • Biometric & Sensor Data: We do not collect biometric identifiers or precise real-time GPS location.

03 Public Blockchain Data

When you initiate cryptocurrency transfers or on-chain interactions via the Application, these transactions are broadcasted directly to public blockchain networks (such as EVM-compatible chains). Public blockchain data (including wallet addresses, transaction hashes, timestamps and token amounts) is immutable, public by design and not governed by this Privacy Policy.

04 Third-Party Services

The Application relies on a minimal set of third-party infrastructure, used solely to deliver messages and keep the Application working. None of these services receive your private keys or the readable content of your messages.

  • Blockchain RPC Providers (Alchemy and public RPC nodes): Used to read blockchain state and broadcast signed transactions to the Polygon network. As with any network request, these providers may process your IP address and the public wallet address involved in the request.
  • Push Notifications (Google Firebase Cloud Messaging): Used to wake the Application when a new message arrives. Firebase receives a device push token. Notifications are silent wake-up signals and never contain message content, sender names or keys.
  • Notification Relay (Google Cloud Run & Firestore): Our lightweight backend stores your device push token together with your public wallet address, so it knows which device to wake when a new on-chain message is addressed to you. It does not store message content, contact lists or keys.
  • Encrypted Attachments (Google Cloud Storage): Photos, files and voice messages are encrypted on your device before upload. We only store the encrypted data, which we cannot decrypt. Attachments are automatically deleted 24 hours after upload.
  • Technical Logs: Our infrastructure providers may temporarily process IP addresses and request metadata in server logs for security and reliability purposes.

05 Website Purchases & Wallet Connection

Premium can be purchased on our website by connecting a crypto wallet. No account, name, email or card details are required.

  • Wallet Connection (Reown / WalletConnect): Used to connect your wallet to the website. Reown processes your public wallet address, the network you use and technical connection data (such as your IP address) to establish the connection. We never receive your private keys or seed phrase and every transaction must be approved by you in your wallet.
  • On-Chain Payments: Purchases are paid in POL directly on the Polygon blockchain. The payer address, recipient address, package, amount and time of purchase are recorded publicly on-chain, as described in the "Public Blockchain Data" section. Blockchain payments are final and cannot be reversed by us.
  • No Payment Data Stored: Our website does not store your wallet address, purchase history or any payment details on our servers. The wallet session is kept only in your browser and ends when you disconnect.

06 Data Retention & Deletion

Snapchain keeps as little data as possible, for as short a time as possible:

  • Local Data: Your chat history, contacts and keys reside locally on your device. You can delete all of it at any time by clearing the Application's storage or uninstalling the app.
  • Encrypted Attachments: Automatically and permanently deleted from cloud storage 24 hours after upload, whether or not they were opened.
  • Push Registration: Your push token and wallet address are kept only while needed to deliver notifications. You can request their deletion at any time via our Support page.
  • No User Accounts: We do not maintain user accounts or profiles. Apart from the push registration described above, no user data is retained on our servers.
  • On-Chain Data: Data written to a public blockchain (such as encrypted message payloads, wallet addresses and transactions) is permanent by design and cannot be deleted by us or by anyone else.

07 Children's Privacy

The Application is intended strictly for users aged 18 and older. We do not knowingly collect or solicit data from anyone under the age of 18.

08 Changes to This Policy

We may update this Privacy Policy from time to time. Any modifications will be reflected with an updated "Last Updated" date at the top of this page.

Questions about this policy?

Reach out to the team and we'll get back to you.

Contact support