Privacy Policy

Last Updated: July 30, 2026

Voyd ("we", "our", or "us") provides a peer-to-peer (P2P), end-to-end encrypted messaging service. We believe that privacy is a fundamental human right. Therefore, our service is designed as a zero-state architecture, meaning we cannot read, store, or access your messages, calls, or files.

Data Collection and Usage

Our app operates directly between devices whenever possible. We minimize the data we process to only what is strictly necessary to route encrypted traffic.

1. Messages, Calls, and Files

All communication is end-to-end encrypted on your device using Double Ratchet and ML-KEM-768 hybrid cryptography before being transmitted. We do not have the keys to decrypt your data. Your messages, call audio/video, and file transfers are strictly peer-to-peer (WebRTC) or routed through relays as opaque, encrypted blobs. We do not store your communication history on any server.

2. Device Permissions

To provide core functionalities, the app requests the following Android permissions locally on your device:

Microphone and Camera: Used exclusively for audio and video calls. Stream data is encrypted locally and sent directly to your peers. We never record or intercept this media.
Location: Used only if you choose to share your location with a peer. The location data is encrypted just like a standard message.
Storage / Media: Used to attach files to messages, save received files, and set your profile avatar.
Foreground Services: Used to maintain active calls or background file transfers reliably while you use other apps.

3. Account and Identity

Your cryptographic identity is generated locally on your device. We use passkeys (WebAuthn) for decentralized recovery, ensuring that your keys remain bound to your secure hardware. We do not require a phone number or email address.

Data Retention

Because we do not store your messages, media, or call logs on our servers, there is no data to retain. If a message cannot be delivered immediately (e.g., the recipient is offline), it remains encrypted on the sender's device until a connection can be established. Our signaling servers handle only transient public keys and connection metadata (SDP/ICE) which are dropped immediately after connection.

Third Parties

We do not sell, rent, or monetize your data. The app uses Firebase Cloud Messaging (FCM) solely to wake up the app when receiving a call or message while backgrounded. FCM receives only opaque, non-identifying wake-up signals.

Changes to This Policy

We may update this Privacy Policy from time to time as we add new features or as regulatory requirements change. We will notify you of significant changes via an in-app notice or by updating the date at the top of this document.

Contact Us

If you have questions about this Privacy Policy, please contact the developer at [email protected].