Privacy Policy

Last updated: October 29, 2026

This policy explains how Sandesh processes information when you use its private messaging service. Sandesh is operated by Manohar Gadkari. Questions or privacy requests can be sent to support@cipherchat.co.in.

Information we process

• Account and identity: your Sandesh ID, Apple account subject, and the email address Apple provides when you choose to share it. We use these to create, secure, recover, and manage your account.
• Device and security data: device identifiers, public authentication and encryption keys, session and recovery records, and rate-limit/security events. These protect accounts and route messages.
• Messages and attachments: encrypted message and attachment data, sender and recipient IDs, timestamps, delivery state, and size/checksum metadata. Content is encrypted on your device. The service processes and temporarily stores encrypted content to deliver it to recipients; it is not designed to expose message or attachment plaintext to Sandesh.
• Profiles and social activity: display name, profile photo, status text, connection invitations, contacts you add, blocks, reports, and status views. These support the features you choose to use.
• Notifications: push tokens are encrypted before storage and used to send content-minimized notifications.

How information is used and shared

We use this information to provide messaging, account and device security, recovery, abuse prevention, support, and service reliability. Cloudflare provides the Worker, database, realtime, and encrypted media infrastructure. Apple provides Sign in with Apple and push notification services. These providers process data to deliver their services under their terms. Sandesh does not sell personal information or use it for cross-app advertising or tracking.

Retention and deletion

Account and device records are kept while your account is active. Pending encrypted messages and encrypted attachments are retained for delivery and expire under service limits; encrypted media is configured to expire within 30 days. Statuses expire after 24 hours, though limited operational metadata may remain briefly for cleanup and reliability. Security and abuse records may be kept as needed to protect the service or comply with law. When you delete your account, active account, device, profile, push, pending-message, status, and media records associated with it are deleted. Encrypted backup copies may expire through backup rotation, and information required by law may be retained.

Your choices

You can manage profile visibility and devices in the app, revoke devices, export an encrypted backup, block or report accounts, and delete your account from Settings → Account. Camera access is used to scan QR invitations. Sandesh does not upload your address book by default.

Security and children

Sandesh uses device authentication, encryption, and access controls, but no system can guarantee absolute security. Sandesh is not intended for children under 13. If you believe a child has created an account, contact support.

Changes

We may update this policy as the service changes. We will update the date above and provide notice in the app when required.