Legal

Privacy Policy

Nullix is built so that there is as little as possible to know about you — and nothing to read.

Effective July 12, 2026

In short: Nullix is designed so that we know nothing about you. No phone number, no email, no name. All messages, calls, photos, files and voice notes are end-to-end encrypted — only you and your contact can read them. We cannot.

1. What we do not collect

  • Phone number, email, name or date of birth. Sign-up is anonymous; your account is a cryptographic key generated on your device.
  • The content of messages, calls, photos, videos, files and voice notes. Everything is encrypted with the Signal Protocol before it leaves your device; the server only sees ciphertext.
  • Your contacts or address book. They never leave your device.
  • Background location, advertising identifiers or behavioral analytics. Nullix collects none of these. If you choose to share your location in a chat, the app reads the coordinates only at that moment and sends them to your contact with end-to-end encryption.

2. What the server processes

  • An anonymous ID (NLX-XXXX-XXXX-XXXX) derived from your public key, not linked to your identity.
  • Routing metadata — which ID sends an encrypted envelope to which ID, its size and time. The content is inaccessible.
  • Username and display name — only if you choose to set them so others can find you; removable at any time. Avatars never reach the directory and are shared with contacts end-to-end encrypted only.
  • A push token to wake the app for incoming messages and calls. Notifications are generic and contain no message content.
  • An undelivered message queue — encrypted envelopes held until the recipient comes online, then deleted.

3. On-device storage

Your chat history lives only on your device in an encrypted database (SQLCipher), with keys in the system secure storage (Keychain / Keystore), optionally protected by a passcode and Face ID. Delete the app or tap “Delete all data” and the history is gone forever — we keep no copies.

4. Reports and moderation

When you report a user, up to 10 of the most recent messages you received from them are voluntarily forwarded to our moderation inbox — otherwise a report cannot be verified, since we cannot see conversations. Reports travel with the same end-to-end encryption, are used solely to act on the offender, and are never shared with third parties. Offenders may be banned from the server.

5. Data sharing

None. We do not sell or share data with third parties. No ads, no trackers, no analytics SDKs. We cannot hand over conversation content upon request — we simply do not have it.

6. Your rights

At any time you may remove your username from the directory, wipe all data in the app, or stop using the service — nothing identifiable remains. For data questions, use the anonymous support chat in the app (Profile → Support) or email support@nullix.chat.

7. Age

Nullix is not intended for children under 13 (or the minimum age required in your country).

8. Changes

If this policy changes, we will update this page and the date above. Material changes will be announced in the app.