Privacy Policy

Crypton Messenger · Last updated: 16 July 2026

This Privacy Policy describes how Crypton Messenger ("we", "our") handles information when you use our mobile application and related services ("Service").

1. Information We Collect

Account data: phone number, username, display name, avatar.
Profile data: optional bio and settings you choose to provide.
Messages: encrypted content of your chats. Messages are protected with end-to-end encryption — we cannot read them.
Metadata: timestamps, delivery status, participant IDs required to route messages.
Device data: OS version, app version, device model, push tokens.
Diagnostics: app crash reports and limited technical events tied to an install identifier and your account so we can keep the Service stable, secure, and supportable.
Crypto wallet: public addresses and transaction metadata you initiate. Private keys never leave your device.

2. How We Use Information

Deliver messages, calls, and notifications.
Authenticate you and keep your account secure.
Prevent abuse, spam, and fraud.
Provide customer support.
Comply with legal obligations.

3. End-to-End Encryption

Messages, voice notes, and calls are end-to-end encrypted. The encryption keys are generated and stored on your device. We do not have access to the plaintext of your communications.

3.1 Health & Fitness Data (Apple HealthKit — iOS only)

On iOS the optional "Activity Rings" feature displays your daily activity on the app's home screen. The data is read from Apple HealthKit. Access is disabled by default and can only be enabled by explicitly granting the permissions in the iOS system prompt. The Android app does not read any health or fitness data and does not integrate with Health Connect.

What we read (iOS): steps, distance, active calories burned, and exercise session duration for the current day.
Access mode: read-only. We never write to HealthKit, and we do not request access to any other data category (such as heart rate, sleep, body measurements, medical records, or menstrual data).
Local display: by default, all values are processed entirely on your device to compute the ring percentages. Merely enabling Activity Rings does not send HealthKit data to our servers.
Optional PawCoins rewards: a separate in-app toggle, disabled by default, lets you send only the calendar date and your aggregate daily step total to Crypton. We use that information solely to calculate the PawCoins and pet progression shown to you. Active calories, distance, exercise and stand values remain on your device. We do not use HealthKit data for advertising, marketing, profiling, or data mining and do not share it with third parties.
Storage and deletion: if rewards sync is enabled, the date and credited step high-water mark are stored with your account to prevent double awards. Turning the toggle off stops future collection and removes any unsent offline value from the device. Existing reward records are deleted through the account-deletion process described in Section 4.
How to revoke: open Settings → Privacy & Security → Health on iOS and remove the Crypton Messenger permissions at any time. You can independently disable PawCoins step sync inside the Activity widget without revoking local ring access. Revoking either choice does not affect messaging or other core functionality.

3.2 Diagnostics

Crypton collects limited technical diagnostics to prevent crashes, investigate failed calls or message delivery, maintain security, and provide support. These records may include the app build, operating-system version, an install-stable random identifier, event timestamps, subsystem state, and Apple MetricKit crash details such as exception, signal, termination reason, and a truncated call stack. We redact known credential fields and do not intentionally include message contents, passwords, one-time codes, wallet private keys, seed phrases, or access tokens.

Diagnostics are linked to your account while you are signed in, are used only for app functionality, security and reliability, are not used for advertising or tracking, and are not sold. They are written to protected operational logs and retained only for the period needed for troubleshooting, security response and applicable legal obligations.

4. Data Retention

Messages are retained on our servers only for delivery. Account data is retained while your account is active. You can delete your account at any time from Settings; this removes your profile and associated data within 30 days, excluding information we must retain by law.

5. Sharing

We do not sell your personal data. We may share limited data with service providers (cloud hosting, SMS delivery, push notification relays) strictly to operate the Service, and with law enforcement only when legally required.

6. Your Rights

You can access, correct, export, or delete your data from within the app Settings, or by contacting us. Users in the EEA, UK, and California have additional rights under GDPR/CCPA including the right to restrict processing and to lodge a complaint with a supervisory authority.

6.1 Right to Data Portability (GDPR Art. 20)

You can request a machine-readable copy of the personal data we hold about you at any time. Inside the app, choose Settings → Privacy → Download my data; the same flow is available over our REST API by authenticated request to POST /api/v1/users/me/data-export, polling GET /api/v1/users/me/data-export/<id>, and finally downloading the archive from GET /api/v1/users/me/data-export/<id>/download.

The archive is delivered as a single indented JSON file (UTF-8) with the following top-level sections:

meta — request id, your user id, generation timestamp, and schema version.
profile — your account fields (email, phone, username, name, bio, avatar, birthday, city, website, gender, verification flag, role, 2FA-enabled flag, last-seen, premium status, created/updated timestamps).
sessions — metadata for your active sign-in sessions (device name, IP, user-agent, created/last-used timestamps). Access tokens are stored only as a SHA-256 head hash so the archive cannot be replayed to take over your account.
push_tokens — registration metadata for your push devices (platform, app build, last-seen timestamps). Raw device tokens are omitted as they are credentials.
blocked_users — list of accounts you have blocked.
saved_messages — index of messages you have saved (message and chat ids, save timestamps).
notification_preferences — your notification settings dictionary.

The following are intentionally not included in the archive: your password, two-factor secret, two-factor backup codes, raw push device tokens, raw session/access tokens, and the cleartext bodies of your chat messages. Chat content is end-to-end encrypted on your device — the server only ever holds ciphertext, so there is no plaintext for us to export.

Generated archives are stored on our servers for 72 hours, after which they are automatically deleted; if you need a copy past that window, simply request a new export. Each archive is served only to the requesting account over an authenticated HTTPS download.

7. Children

The Service is not directed to children under 13. We do not knowingly collect data from children under 13.

8. Security

We use industry-standard protections including TLS in transit, encrypted storage at rest, and hardware-backed key storage (Keychain/Secure Enclave) on your device.

9. Changes

We will notify you of material changes to this policy via in-app notice or email. Continued use after changes indicates acceptance.

10. Contact

Questions? Email gectorclub@gmail.com.