1. Overview

White Room (“we”, “our”, “us”) is a privacy-first messaging app designed to keep message content between the sender and recipient. This Privacy Policy explains what information we collect, how we use it, and the choices you have when using White Room (the “Service”).

2. What We Do Not Collect

• We do not collect or store readable message content.
• We do not store your private encryption keys.
• We do not store your recovery phrase.
• We do not sell personal information or message data.
• We do not run advertising based on your private message content.

3. Information We May Collect (Minimal)

To operate reliably and securely, we may collect limited operational data such as:

• App version, device type, and operating system version
• Crash reports and basic performance diagnostics (if enabled on your device)
• Non-content service events needed to deliver messages and prevent abuse

This information is used for security, reliability, debugging, and improving the Service — not for profiling or selling.

4. End-to-End Encryption & User-Owned Keys

White Room generates encryption keys on your device. Your recovery phrase is shown during setup and should be stored securely by you. We do not store it. If you lose it, encrypted chats tied to that key cannot be recovered by White Room.

End-to-end encryption is mandatory in White Room. The Service is designed to operate without providing us access to decrypted message content.

5. Message Delivery & Retention

Messages are encrypted on your device and delivered as ciphertext. We do not retain readable message content. We retain operational data only as long as reasonably necessary for security, abuse prevention, and service reliability.

6. Permissions

White Room may request permissions only when needed for specific features:

• Internet — message delivery
• Storage (optional) — send/receive media
• Camera (optional) — capture photos/videos
• Microphone (optional) — record voice messages

You can revoke permissions at any time in your device settings.

7. Third-Party Services

We may use infrastructure providers and crash reporting tools to operate the Service. These providers are not given access to your private keys or readable message content.

8. Legal Requests

Because White Room does not hold private keys or readable message content, we generally cannot provide decrypted messages. If required by law, we may respond with limited non-content information that we lawfully have.

9. Children’s Privacy

White Room is not intended for children under 13. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this policy from time to time. The “Last updated” date above indicates when changes take effect.

11. Contact

For privacy questions, contact us at support@whiteroom.chat.