1. Overview
Encril (the “App”) is an instant messaging application that uses a cryptographic Session ID as your anonymous identity. We do not collect phone numbers, email addresses, real names, or government ID information. You create an account by generating keys and a recovery phrase locally; your Session ID is derived from your public key.
2. Data We Collect
| Data type | Collected | Purpose |
|---|---|---|
| Session ID (public key identifier) | Yes | Account identification, message routing, friend matching |
| Device fingerprint (platform, OS version, install UUID hash, etc.) | Yes | Security, multi-device binding, abuse prevention |
| IP address | Yes | Login security, abuse prevention, diagnostic correlation |
| Text message content | Yes | Message delivery, history sync, content safety review |
| File / image / voice attachment metadata and object storage links | Yes | Attachment delivery and management |
| Diagnostic logs (device model, OS version, connection status, errors, etc.) | Yes | App stability troubleshooting; encrypted in transit and at rest; deleted after 7 days by default |
| Audio/video call media | No | WebRTC end-to-end encrypted; media streams do not pass through our servers |
| Recovery phrase / private key | No | Stored only in your device secure enclave; never uploaded |
3. Processing and Storage
- Text and file messages are encrypted in transit; our servers may decrypt them for delivery and sync, and store structured copies in our database for delivery, history sync, and content safety.
- Diagnostic logs are uploaded in an encrypted envelope similar to messages; stored encrypted on our servers by default and automatically deleted after approximately 7 days.
- Private keys and recovery phrases are your responsibility; losing your recovery phrase means you cannot recover the same Session ID.
- Object storage (OSS) holds attachment files; access is restricted by signed URLs and permission controls.
4. Sharing and Disclosure
We do not sell your personal data to advertisers. We may disclose limited data when:
- Required to operate infrastructure (e.g., cloud hosting, object storage), under contractual safeguards;
- Required by law, or necessary to address security threats, abuse, or fraud;
- You have given explicit consent for other purposes.
5. Your Rights and Controls
- Block or report other users in the App;
- Manually upload diagnostic logs from Settings;
- Delete local data (clear local account, chat history, and keys);
- Contact us by email for reports, appeals, or data-related requests.
6. Children’s Privacy
The App is not directed at children under 13 (or the higher age required in your jurisdiction). If we learn that such data was collected in error, please contact us so we can delete it.
7. Policy Updates
We may update this policy from time to time. Material changes will be reflected on this page with an updated date, and may be announced in the App when appropriate. Continued use of the App means you acknowledge the updated policy.
8. Contact Us
Email: chenlianhang7@gmail.com