Privacy Policy
This policy covers the kontaks.io website and the Kontaks apps for iPhone and Android, together the “Service.” Kontaks is operated by Korrelated, LLC.
The short version
Kontaks has no user accounts, no phone numbers, no usernames and no contact list on our servers. We cannot read your messages or hear your calls. The complete list of what we do hold is the table below, and it is the whole list rather than a summary of one.
Two things this policy will not claim, because they would not be true. We do not claim you are anonymous: people you pair with or share a room with see the name you chose to present to them, your voice if you speak, and your avatar if you set one. And we do not claim we could never work out who talks to whom — we do not record a contact graph, but group messages arrive as one batch that shows us who is in the group. The security page sets both out in full.
What the Kontaks servers hold
| What | How long | Can we read it? |
|---|---|---|
| Device identity public key | Until you delete it | Yes. It is a public key and it names nobody |
| Push notification token and platform | Until you delete it | Yes |
| Route records: a route id, a sender verify key, a recipient device | Until revoked | Yes, and they are opaque. The two directions of one relationship are stored as unrelated rows |
| The public keys authorized to send over each route, one per device | Until de-authorized, or until the route is revoked | Yes. They are public keys, and no field ties them to a person |
| Invite records: a deliberately slow hash of the invite's first part, and an encrypted bundle | 7 days at most, or until redeemed | No. The bundle is encrypted and the 8-digit PIN never reaches us |
| Messages waiting to be delivered | Until delivered, 7 days at most | No |
| Voice messages and media waiting to be delivered | Until delivered, 7 days at most | No |
| Your encrypted contact roster backup, if you enabled one on our servers | Until deleted; 90 days with no check-in | No |
| Operator settings: minimum app versions, capacity limits, feature switches | Until we change them | Yes. It is our own configuration and contains nothing about any person |
| Aggregate counters: how many calls connected, how often a relay was needed | 13 months | Yes. They are counts, not records |
| A support reference: a random opaque identifier | Until you delete it | Yes. It grants no access and carries no identity |
| Standard load-balancer request logs, including IP address | 30 days | Yes. Kept for abuse and outage response |
That is the whole list. There is no users table, no names, no phone numbers, no email addresses, no message history, no call history and no stored contact list.
What we never do
- We never upload your address book. Not to find your friends, not hashed, not ever.
- We use no third-party analytics or advertising SDKs. None, in the apps or on this website. This page loads no font, script or image from any other domain.
- We do not sell or share your personal information as those terms are used in California law, and we run no cross-context behavioural advertising.
- We do not scan your content. We cannot: it is encrypted end to end and the keys never reach us.
- We never show when you were last online. There is no presence, no last-seen, no typing indicator and no read receipt anywhere in the product.
Backing up to iCloud or Google
Kontaks can back up your encrypted contact roster to your own iCloud private database or your own Google Drive app folder. If you turn that on, the sign-in happens between your device and Apple or Google. Our servers are never part of that conversation and never receive a token, an account identifier or an email address. The backup lives in your own cloud storage, encrypted with a key we do not have.
Telemetry
The apps report aggregate counters and histograms — how many calls connected, how long setup took, how often a relay was needed. There are no identifiers in them and no per-device timeline. You can turn it off in Settings, and it is off by default in the European Union. Crash reports are symbolicated on your device and carry the stack and nothing else.
This website
kontaks.io sets no cookies, runs no analytics, embeds no third-party
content and has no tracking of any kind. The invite pages at
/k/ and /d/ make no network request at all and
never send the address you arrived on to us or to anyone else.
The site is served through a content delivery network, which processes ordinary request metadata — IP address, user agent, the path requested — in order to deliver the page and to respond to abuse and outages.
Support
If you contact support through our helpdesk, that helpdesk holds your ticket, and it may hold a name and an email address if you signed in to it with Apple or Google. The Kontaks backend never holds either, and the two systems are never joined. Support is advisory and never operative: a support agent cannot revoke, restore, delete or change anything on your behalf, which is deliberate — it means nobody can be talked into doing it either.
A diagnostics bundle, if you choose to send one, carries app and device versions, connection statistics and recent errors. It never carries message content, contacts, names, keys, route identifiers, group names or anything that identifies who you talk to.
Deleting everything
“Delete everything” in the app removes every device on your keyring, every route, every waiting message and media object, every outstanding invite, the roster backup, the support reference, and the local data on every device we can reach. It also deletes the encrypted backup in your own iCloud or Google Drive folder, because leaving a decryptable copy behind would make the promise false.
Two things it does not do. It does not cancel a subscription — those are handled by Apple or Google and you must cancel there. And it cannot erase local data on a device you no longer physically control; that device's server records are removed and it is revoked, but what is already on its disk is beyond our reach.
People you had contacts with are told nothing. Their messages simply fail, exactly as they would if you had deleted them individually. See deleting your data.
Legal requests
A demand for message content returns at most seven days of ciphertext we cannot decrypt. A demand for a contact list returns nothing, because no such record exists. We intend to publish a transparency report saying so.
Adults only
Kontaks is for people aged 18 and over. We do not knowingly collect anything from anyone under 18, and no account for a minor can exist, because no account exists at all.
Your rights
If you are in California, you have the right to know what personal information we hold, to have it deleted, and not to be discriminated against for exercising either. The table above is the answer to the first, and “delete everything” is the answer to the second, immediately and without asking us. We do not sell or share personal information, so there is no opt-out to offer.
Kontaks launches in the United States. If you are elsewhere and have a request, write to us at the address below.
Changes to this policy
If we change this policy, the updated version will be indicated by the Effective Date at the top of this page. If the change is material we will also give notice in the app.
Contact
Privacy: privacy@kontaks.io
Support: support@kontaks.io
Korrelated, LLC