Privacy policy
AmoraChat is a private messenger for two people. This policy explains what the app stores, why, who processes it for us, and how you delete it. AmoraChat is made by an independent developer ("we"); contact us at skydev.apps.contact@gmail.com.
What we store
- Account: your email address and a password hash (held by Firebase Authentication), and the display name you choose.
- Pairing: which account you are paired with, and invite codes (they expire after 24 hours).
- Messages: the text you send, replies, reactions, read receipts, and the photos and voice notes you share. Your partner can see them; nobody else in the app can.
- Call history: when a call happened, whether it was voice or video, how it ended and how long it lasted. The audio and video of calls are never recorded or stored.
- Device data: a push notification token so your phone can ring and show new messages, and which platform you use (Android or iOS).
- Server logs: our server keeps short-lived technical logs (time, request path, status) to keep the service running. They do not contain message content.
We do not collect your contacts, location, advertising ID or analytics, and we do not show ads. We do not sell or share your data, and we do not use it for anything other than running AmoraChat for you and your partner.
How it is protected
- Everything between the app and our server travels over encrypted connections (TLS).
- Calls connect directly between your two phones and are end-to-end encrypted (WebRTC). When a network blocks a direct connection, the call is relayed through Cloudflare's TURN service, still encrypted; the relay cannot see or hear it.
- Messages, photos and voice notes are stored encrypted at rest by our providers. They are not end-to-end encrypted, which means our server can technically read them; we only access them to run the service.
- Photos and voice notes are served only to the two members of the couple, through links that expire within minutes.
Service providers
We use these companies to run AmoraChat. They process data only on our behalf:
- Google Firebase: sign-in (Firebase Authentication) and push notifications (Firebase Cloud Messaging).
- Fly.io: runs our server (Singapore).
- Neon: our database (Singapore).
- Cloudflare: stores photos and voice notes (R2) and relays calls when needed (TURN).
Keeping and deleting your data
- Unpair (menu, Privacy and account) ends the pairing for both of you and deletes your shared chat, photos, voice notes and call history.
- Delete account (same place) deletes all of the above, your profile and your login. See how to delete your account, including without the app.
- Deleted messages are removed from the chat at once. Deleted data can stay in encrypted database backups for up to 7 days before it is overwritten.
- To get a copy of your data, email us from the address you signed up with.
Children
AmoraChat is meant for adults (18 and over) and is not directed at children.
Changes
If this policy changes, we will update the date above and, for important changes, tell you in the app.