1. What we do not collect
- Phone number, email, name or date of birth. Sign-up is anonymous; your account is a cryptographic key generated on your device.
- The content of messages, calls, photos, videos, files and voice notes. Everything is encrypted with the Signal Protocol before it leaves your device; the server only sees ciphertext.
- Your contacts or address book. They never leave your device.
- Background location, advertising identifiers or behavioral analytics. Nullix collects none of these. If you choose to share your location in a chat, the app reads the coordinates only at that moment and sends them to your contact with end-to-end encryption.
2. What the server processes
- An anonymous ID (NLX-XXXX-XXXX-XXXX) derived from your public key, not linked to your identity.
- Routing metadata — which ID sends an encrypted envelope to which ID, its size and time. The content is inaccessible.
- Username and display name — only if you choose to set them so others can find you; removable at any time. Avatars never reach the directory and are shared with contacts end-to-end encrypted only.
- A push token to wake the app for incoming messages and calls. Notifications are generic and contain no message content.
- An undelivered message queue — encrypted envelopes held until the recipient comes online, then deleted.
3. On-device storage
Your chat history lives only on your device in an encrypted database (SQLCipher), with keys in the system secure storage (Keychain / Keystore), optionally protected by a passcode and Face ID. Delete the app or tap “Delete all data” and the history is gone forever — we keep no copies.
4. Reports and moderation
When you report a user, up to 10 of the most recent messages you received from them are voluntarily forwarded to our moderation inbox — otherwise a report cannot be verified, since we cannot see conversations. Reports travel with the same end-to-end encryption, are used solely to act on the offender, and are never shared with third parties. Offenders may be banned from the server.
5. Data sharing
None. We do not sell or share data with third parties. No ads, no trackers, no analytics SDKs. We cannot hand over conversation content upon request — we simply do not have it.
6. Your rights
At any time you may remove your username from the directory, wipe all data in the app, or stop using the service — nothing identifiable remains. For data questions, use the anonymous support chat in the app (Profile → Support) or email support@nullix.chat.
7. Age
Nullix is not intended for children under 13 (or the minimum age required in your country).
8. Changes
If this policy changes, we will update this page and the date above. Material changes will be announced in the app.