Privacy Policy for AdHoc DM

1. Introduction

AdHoc DM is a privacy-first messaging app that allows users to send encrypted direct messages (DMs) and photos. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information.

2. Information We Collect

We collect very minimal information:

• Camera Access
  We request camera permission only to:
  • Scan QR codes
  • Allow you to take photos to send in a DM
  • Send your video during a video call
• Microphone Access
  We request microphone permission only to carry your voice during voice and video calls. The microphone is never used outside an active call.
• Location Access
  We request location permission only to allow you to send your current location in a DM. We do not track your location in the background or use it for any other purpose.
• Messages and Photos
  All messages and photos are protected with End-to-End Encryption (E2EE). We do not have access to the content of your messages or photos.
• Analytics
  We collect anonymous analytics such as general app usage and page views. This data cannot be used to identify you personally.
• Push Notification Tokens
  When push notifications are enabled (the default), a push token issued by your device's notification service (Firebase Cloud Messaging) is stored on our servers, keyed to your app's anonymous installation ID. This token only lets us tell your device that a new message is waiting — push alerts never contain message content or sender identity. No token is stored when notifications are set to “Periodic check” or “Off”.
• Voice & Video Calls (Beta)
  Calls are protected with End-to-End Encryption: call audio and video are encrypted on your device, and the relay servers that carry them (LiveKit) cannot decrypt your call media. Calls are never recorded or stored — media exists only in transit, for the duration of the call. We collect anonymous usage statistics about calls limited to the call type (voice or video) and duration; never who you called. If you turn off “Incoming calls” in Settings, that single preference is stored on our servers keyed to your anonymous installation ID, so that people who try to call you can be told you are not taking calls; it is removed when you turn incoming calls back on.

We do not collect names, emails, phone numbers, or any other personal identifiers unless you voluntarily provide them.

3. End-to-End Encryption & Data Handling

• All messages and images are encrypted on your device before being sent.
• Images are stored encrypted on our remote servers.
• Once a recipient downloads an image, it is automatically deleted from our servers.
• Any undownloaded images are periodically deleted after a period of time.
• All messages are stored in an encrypted local datastore on your device.
• Photos remain on your device (unencrypted) in the app’s local file directory only until you delete them from the DM.
• Voice and video calls are end-to-end encrypted on your device, frame by frame, before transmission. The relay servers that carry call traffic (LiveKit) see only encrypted data and cannot listen to or watch your calls.
• Call audio and video are never recorded and never stored — by us, or by our relay providers.

4. How We Use Your Information

We use the limited information we collect solely to:

• Provide the core features of AdHoc DM (encrypted messaging, photo sharing, location sharing, and encrypted voice & video calls)
• Enable QR code scanning
• Improve the app through anonymous analytics
• Ensure reliable delivery of your encrypted messages
• Alert your device that a new message is waiting, when push notifications are enabled (the alert itself carries no message content)

5. Sharing of Information

We do not share your personal information or message content with third parties, except in the following limited cases:

• When required by law
• With trusted service providers who help us operate the app (under strict confidentiality agreements)

We never sell your data.

6. Data Storage and Deletion

• Local Storage: All messages are stored encrypted on your device.
• Remote Storage: Images are stored encrypted on our servers only until they are downloaded or automatically deleted after a period of inactivity.
• Push Tokens: Your device's push token is deleted from our servers when you switch notifications to “Periodic check” or “Off”, when you reset the app's data, and automatically after 270 days without use.
• Calls: Call audio and video are never stored anywhere — they are relayed in real time, end-to-end encrypted, and cease to exist when the call ends. Your “Incoming calls” preference is stored only while you have incoming calls turned off; it is removed from our servers when you turn them back on or reset the app's data.
• You have full control to delete messages and photos from your DMs at any time.

7. Your Rights

You can:

• Revoke camera or location access anytime through your device settings
• Delete your messages and photos at any time
• Request deletion of any account-related data (if applicable)
• Contact us with any privacy questions

8. Children’s Privacy

AdHoc DM is not intended for children under 13. We do not knowingly collect information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy occasionally. The latest version will always be available on our website.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: contact@talloaksventures.com
Website: https://adhocdm.com