Privacy Policy

SecureChat — StealthX Platform · Last updated: April 2026

The Short Version

SecureChat collects nothing. Your messages are encrypted on your device before leaving it. We have no servers that store your messages. We have no accounts. We have no way to read your communications, even if ordered by a court.

Data We Collect

Free tier: Anonymous crash reports only (opt-out available in Settings). No message content, no contact lists, no metadata.

Pro / Elite tier: Nothing. Zero telemetry. The app makes no network calls except for message relay (encrypted) and optional one-time Kaspa identity anchoring.

Messages

All messages are encrypted end-to-end on your device using XChaCha20-Poly1305. Relay nodes see only encrypted blobs. Messages are deleted from relay nodes immediately after delivery. We have no access to message content.

IFR Token Verification

When you verify your IFR tier, your wallet address is checked against the Ethereum blockchain (read-only call). Your wallet address is stored locally in an encrypted, HMAC-protected cache. It is never sent to our servers.

Kaspa Identity

If you choose to anchor your identity to the Kaspa blockchain, your public key is written as a Kaspa transaction. Public keys are, by definition, public. Your private key never leaves your device.

Contact Us

github.com/NeaBouli/securechat/issues

Chameleon Privacy OS

Chameleon is part of the SecureChat ecosystem. Its privacy commitments:

No internet permission — Chameleon has no internet access by default. All encryption happens locally.
No data collection — No analytics, no crash reports, no telemetry.
Local storage only — All data stored with SQLCipher encryption. Keys in Android Keystore (StrongBox/TEE).
AccessibilityService — Used exclusively for text encryption overlay. No data is transmitted. No screen content is stored. Source code is GPL-3.0 and fully auditable on GitHub.