Last updated 20 October 2026
In short
- Your messages, calls, voice notes and files are end-to-end encrypted. They're locked on your phone and can only be opened on the recipient's. We never have the keys.
- We keep as little as possible, for as short as possible. Encrypted messages are deleted from our server the moment they're delivered, or after 7 days if never collected.
- No advertising, no analytics, no tracking, no selling of data. Ever.
- If anyone demands your data, we can only hand over the little listed below, and never the content of anything you sent.
Who is responsible
Aurisse is operated by [Operator name], [Address], Switzerland, contact [privacy email] ("we"). We process personal data under the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation.
What the service stores
- Your username and public keys, so members of your circle can find you and encrypt to you. Public keys can only lock messages, never open them.
- A hash of your login token, never the token itself.
- Encrypted messages, files and receipts waiting for delivery: unreadable to us, deleted once your device confirms it has them, or after 7 days.
- When you were last online, unless you turn on invisible mode.
- Push addresses of your devices, if you allow notifications, so we can wake your phone. The wake-up itself is encrypted for your device.
- Hashes of invitation codes, until they're used or expire.
- For circle owners who order a circle: the name and email address given for invoicing, the circle's name and size, and its paid period.
We don't ask for your phone number, contacts or location. The server keeps no request logs and stores no IP addresses. It runs in Switzerland.
- Your Google account email and a Google user ID, because sign-in uses Google. The owner sees the emails on the invite list.
- Your username and public keys, so members can find you and encrypt to you. Public keys can only lock messages, never open them.
- Encrypted messages, files and receipts waiting for delivery: unreadable to us, deleted once delivered, or after 7 days.
- When you were last online, unless you turn on invisible mode.
- Push addresses of your devices, if you allow notifications.
This version runs on Google Firebase, with the database in Sydney, Australia. Google processes this data on our behalf and, as a US company, may be subject to US law. Our own Swiss server will replace it.
What we never have
- The content of your messages, calls, voice notes, photos and files.
- Your private keys, your app-lock passcode, or your chat history (it lives only on your devices).
- Your contact list, location, or what you do in other apps.
On your device
Your keys and chat history are stored only on your phone. With app lock on, the history is encrypted with your passcode. Deleting your account in Settings erases all of it from the device and removes your username from the server. We can't recover anything for you, by design.
Other parties involved
- Push services (Google on Android, Apple on iPhone) deliver notification wake-ups. These are encrypted for your device; the push service learns only that something was delivered.
- Calls connect phone to phone. To find a route, each phone asks a public STUN server (Cloudflare) for its own internet address; it sees that address, never the call. When our own relay is in place, some calls will pass through it, still end-to-end encrypted.
- Invoices for circles are sent by email from our own mailbox.
Requests from authorities
We answer only to legally binding orders from Swiss authorities, review each one, and challenge it where the law allows. Even when an order is valid, we can only provide the limited data listed above: never message content, which we don't have.
Your rights
You can ask what data we hold about you, ask us to correct or delete it, and complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC). Most of your data is deleted simply by deleting your account in Settings; for anything else, write to [privacy email].
Changes
If we change this policy we'll update the date above, and tell you in the app about anything important.