Privacy
Privacy Policy
Effective 3 September 2026
1. Who we are
Sanchr is operated by Zynclave Tech Private Limited (“Sanchr”, “we”, “us”), a company registered in India. This policy explains what personal data the Sanchr apps and service handle, why, and what choices you have. For privacy questions or requests, write to security@sanchr.com.
2. What we cannot see
Sanchr uses the Signal Protocol with keys that exist only on your devices. The following are encrypted on your device before they leave it, and only the intended recipients can decrypt them:
- Message text, reactions, replies and disappearing-message settings.
- Photos, videos, voice notes, documents, locations and shared contacts.
- Voice and video calls (media is encrypted end to end; signalling is authenticated).
- Your display name and profile photo, which are encrypted with a profile key that you share only with your contacts.
- Backups, which are encrypted with a recovery key that only you hold. If you lose it, we cannot restore the backup for you.
Because we cannot decrypt this content, we cannot read it, search it, moderate it, or hand it over. Where the server stores it at all (for example a photo waiting to be downloaded), it stores ciphertext for a limited time and then deletes it.
3. What we collect and why
| Data | Why we need it | How long |
|---|---|---|
| Phone number | It is your account identifier. We verify it with a one-time code sent by SMS and use it so that people who know your number can find you. | Until you delete your account. |
| Device and installation identifiers, device name, platform | To deliver messages and calls to the right device, to let you review the devices on your account, and to sign you out of a lost one. | Until the device is removed or the account deleted. |
| Push notification tokens (APNs, including VoIP) | To wake the app for new messages and incoming calls. Notifications carry no message content. | Until replaced or the device is removed. |
| Public keys and pre-keys | Published so that others can start an encrypted session with you. They contain no private material. | Rotated by the app; removed with the account. |
| Delivery metadata: sender and recipient identifiers, timestamps, message size | To queue and route ciphertext. Sanchr uses sealed sender so that, where possible, the server does not learn who sent a message. | Queued messages are deleted once delivered or after they expire; delivery logs are kept briefly for reliability. |
| Session tokens | To keep you signed in. Refresh tokens expire after 90 days of inactivity. | Until sign-out, expiry or account deletion. |
| Settings you sync (read receipts, online status, typing indicators, blocked contacts) | So that the service can honour them and other devices can follow them. | Until changed or the account is deleted. |
4. Finding your contacts
If you allow access to your address book, Sanchr checks which of your contacts use the service. Phone numbers are never uploaded in the clear: the app blinds each number with an oblivious pseudorandom function before it is sent, so the server can answer “is this number registered?” without learning the numbers you asked about. Names from your address book stay on your device. You can decline this permission and still use Sanchr by adding contacts manually or by QR code.
5. What we do not do
- We do not sell, rent or trade personal data.
- We do not show advertising or share data with advertisers or data brokers.
- We do not track you across other apps or websites, and the apps contain no third-party analytics or advertising SDKs.
- We do not collect your precise location. A location you choose to share in a chat is encrypted like any other message.
6. Service providers
We use a small number of infrastructure providers to run Sanchr: cloud hosting for our servers and encrypted media storage, and an SMS gateway that delivers verification codes. They process data only on our instructions and only as needed to provide those services. Apple delivers push notifications to iOS devices, and Apple’s own privacy policy applies to that delivery.
7. Legal requests
We respond to valid legal process as required by applicable law. In practice, what we can produce is limited to the account data in section 3: a phone number, registration and last-connection dates, and device identifiers. We cannot produce message content, media, contact lists, names or profile photos, because we do not have them in a readable form.
8. Your controls
- Delete your account from Settings → Security → Delete Account. This removes your account, keys, devices, queued messages and stored media from our servers. Messages already delivered to other people’s devices remain with them.
- Privacy settings let you turn off read receipts, online status and typing indicators.
- Disappearing messages can be set per conversation.
- App lock protects the app with Face ID, Touch ID or your passcode.
- Access and correction. You can see and change your profile in the app. To ask for a copy of the account data we hold, or to correct it, email us; we will verify the request from the account’s phone number.
9. Security
Beyond end-to-end encryption, all traffic between the apps and our servers uses TLS with certificate pinning, keys on your device are kept in the system keychain and are not synced to the cloud (except the profile key, which is needed to restore your name and photo after a reinstall), and stored media is encrypted at rest with keys the server does not hold. We publish our security design and welcome review; report vulnerabilities to security@sanchr.com.
10. Children
Sanchr is not directed at children under 13, and you must be old enough to consent to these terms under the law where you live. If you believe a child has created an account, contact us and we will delete it.
11. International transfers
Our servers are operated from infrastructure regions we choose for reliability, which may be outside the country you live in. The data described in section 3 may therefore be processed in those regions, under the protections described in this policy.
12. Changes
If we change this policy in a way that affects you, we will show a notice in the app before the change takes effect. The current version is always at sanchr.com/privacy, with its effective date at the top.
13. Contact
Zynclave Tech Private Limited · security@sanchr.com