Legal

The short version

Disckreet is a private messaging app for couples. Everything you send is encrypted on your device before it ever reaches us, and only your partner can decrypt it. We don't have the keys, so we can't read your messages or view your photos and videos, ever. We also don't ask for your name, your email address, or your phone number to use the app.

We do collect a small amount of other information to make the app work: an anonymous account identifier, the nickname you choose so your partner knows who they're talking to, some technical metadata about your messages (like when they were sent and how big they are, but never their content), and basic app-usage analytics that help us understand whether the product works. None of this is sold, and none of it is used for advertising. There is no advertising in Disckreet.

The rest of this policy explains that in full, including your rights, how long we keep things, and who we share information with. If you only take one thing from it: we can't read your content, and we've tried to collect as little as possible of everything else.

1. Who this policy is about, and who we are

Disckreet is operated by Antovate Pty Ltd ("Antovate", "we", "us"), a company registered in Australia. Antovate is the data controller for the personal information described in this policy.

Contact: privacy@disckreet.com

This policy covers the Disckreet iOS app, currently on version 4.0. It does not cover third-party websites or services we link to.

2. The information we collect

We built Disckreet around collecting as little as we can while still running a working messaging and calling service. Here is everything we collect, and why.

Account information. When you first open Disckreet, we create an anonymous account for you using Firebase Authentication. This does not involve an email address, a password, a phone number, or your real name. You're identified only by a randomly generated account ID. We also generate a public encryption key for your account; your private key is generated on your device and never leaves it in a form we can read.

Your nickname. You choose a nickname when you set up the app, and it's stored in plain text so your partner can see who they're talking to. This is the only piece of free-text personal information the app asks you for, and you control what it says. We'd suggest not using your full legal name if you'd rather it wasn't recorded.

Your messages, photos, and videos. All of this is encrypted on your device before it’s uploaded, using end-to-end encryption (see section 3). We only ever hold the encrypted, unreadable version. We do process some information about this content that isn’t encrypted: when a message or file was sent, its file size, which conversation ("channel") it belongs to, and who the members of that channel are. We never see the words in your messages or the images in your media.

Device and notification information. We collect a push notification token so Apple can deliver notifications to your device on our behalf, and a separate token used only to alert your device to an incoming call through Apple’s CallKit system.

Calling information. Audio and video calls connect directly between your device and your partner’s device wherever possible. When a direct connection isn’t possible (for example, because of the network you’re both on), the encrypted audio and video is relayed through Cloudflare’s TURN relay service. Cloudflare only ever handles encrypted traffic it cannot decrypt. See section 5 for more on this and our other service providers.

App usage analytics. We use Firebase Analytics to understand broad patterns of how the app is used, such as which screens people visit and which features get used. This is built with a safeguard: the app is designed to block any analytics data field whose name suggests it could carry personal information, so no names, email addresses, message content, or encryption keys are ever sent this way. In addition to individual events, we record four broad, categorical properties against your anonymous account: whether you're on the free plan, a paying subscriber, or a lapsed subscriber; whether you're currently paired with a partner, paired with more than one, or not currently paired; whether notifications are turned on; and whether biometric app-lock is turned on. These are always one of a small number of fixed categories, never a number and never free text.

Crash and error reports. We use Firebase Crashlytics, and in some builds Sentry, to find and fix bugs. These tools receive your anonymous account ID and technical details about the crash or error (such as the type of error and which part of the app it happened in), never message content, media, or key material.

Anti-abuse checks. We use Firebase App Check and Apple's App Attest to help confirm that requests to our servers are coming from a genuine, unmodified copy of the app, rather than an automated or tampered client. This is a technical integrity check and does not identify you personally.

Subscription and payment information. Disckreet Pro, our optional paid tier, is sold entirely through Apple's In-App Purchase system. We never see your card details or billing information; Apple handles all of that. We receive a receipt from Apple that we validate to confirm you have an active subscription, and a plan status (free, paying, or lapsed).

When you contact us. If you email us, we use your contact details only to reply to you. We will never tell anyone that you use Disckreet, and we don't sell or pass on your details.

Our website. Like most websites, disckreet.com uses standard analytics tools (which use cookies) to help us understand how well the site communicates with visitors. We don't use these to identify you.

What we do not collect. We don't collect or ask for your phone number, your email address (other than when you choose to email us), your real name, your contacts, your location, or Apple's advertising identifier. We don't run any advertising, we don't sell personal information to anyone, and we don't use any third-party tracking or advertising SDKs. Because of this, Disckreet does not show you Apple's App Tracking Transparency prompt, as we have nothing to ask permission to track.

3. End-to-end encryption, and what it actually means

Every message, photo, and video you send in Disckreet is encrypted on your device before it leaves it, using AES-256 encryption with your partner's public key. Only your partner's device holds the private key needed to decrypt it. Your own private key is generated on your device and is never transmitted to our servers in a readable form.

This means Antovate cannot read the content of your messages or view your photos and videos. This isn't a promise about how we choose to behave; it's a structural property of how the app is built. We don't hold the keys, so we're not able to decrypt your content even if we wanted to, even in response to a legal request.

What this doesn’t cover: metadata such as when a message was sent, its size, and who a conversation is between is not encrypted, because we need it to route and deliver your messages. See section 2.

If you turn on iCloud Keychain sync, your private key is backed up through Apple's iCloud Keychain, encrypted by Apple using your device passcode and Apple ID. We have no access to this backup; it's between you and Apple.

4. How long we keep things

• Media (photos and videos). Once your partner has downloaded a photo or video, it's deleted from our servers. If it's never opened, we'll warn the sender at 27 days, and the file is automatically deleted at 30 days.
• Messages. Text messages follow the same retention approach as media within a channel. Encrypted content that has been delivered is not kept indefinitely on our servers.
• Account and metadata. Your account information, nickname, and channel metadata are kept for as long as your account is active.
• Deleting your account. If you delete your account from within the app, we remove the remaining data associated with it from our servers. Some information may persist briefly in backups or logs before it is fully purged; we don't keep it for longer than we need to for operational or legal reasons.
• Analytics and crash data. Retained according to the standard default retention settings of Firebase Analytics, Crashlytics, and (where active) Sentry.

5. Who we share information with

We don’t sell your information to anyone, and we don’t share it for advertising purposes. We use a small number of service providers ("processors") to run Disckreet, each of whom only receives the information described below, and only to provide their service to us:

• Google Firebase (Google LLC / Google Ireland Limited): authentication, encrypted content storage, analytics, crash reporting, and anti-abuse checks, as described in section 2.
• Cloudflare, Inc.: relays encrypted call audio and video when a direct connection between two devices isn't possible. Cloudflare cannot decrypt this traffic.
• Sentry: error reporting, in builds where it is enabled.
• Apple Inc.: push notifications, in-app purchases, and (if you enable it) iCloud Keychain backup of your encryption key.

We may also disclose information if required to by law, such as in response to a valid court order. For message and media content, the encryption described in section 3 means there is nothing readable for us to hand over.

If Antovate is ever involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, with the protections in this policy continuing to apply.

6. International data transfers

Antovate is based in Australia, and our service providers (Google Firebase and Cloudflare) process data in the United States and other countries. This means your information may be transferred to and processed in countries other than your own. Those transfers are governed by the standard terms and data protection safeguards that Google and Cloudflare publish and apply to their services.

7. Your rights

Wherever you are, you can ask us to:

• Access the personal information we hold about you
• Correct it, if it's inaccurate (for example, your nickname)
• Delete it. You can do this yourself at any time from within the app, or by asking us
• Export it, in a portable format, where applicable
• Object to or restrict certain processing, including analytics

To exercise any of these, email privacy@disckreet.com. Because your account isn't tied to an email address, name, or phone number, we may need to verify your request using information only you would have access to (such as your account's pairing history) before acting on it. This is to stop someone else from deleting or accessing your partner's data by impersonating you.

We aim to respond within 30 days. If you're not satisfied with our response, you have the right to complain to your local data protection authority (see sections 9 and 10).

8. Analytics and your choices

You can turn off notifications and biometric app-lock at any time in iOS Settings or within the app; doing so is itself reflected in the coarse analytics properties described in section 2. We don't currently offer an in-app setting to switch off analytics entirely. If you'd like to object to analytics processing, email privacy@disckreet.com and we will consider your request.

9. If you are in the United Kingdom or the European Economic Area

Legal basis for processing. We process your account information, nickname, and content metadata because it's necessary to provide you the service you've signed up for (performance of a contract). We process crash, anti-abuse and analytics data on the basis of our legitimate interest in keeping the app secure, reliable and improving it. This is supported by the fact that Disckreet has no advertising, no cross-app tracking, and safeguards against personal data appearing in analytics.

Supervisory authority. You can lodge a complaint with the data protection authority in your country of residence, place of work, or the place where you believe an infringement occurred. In Ireland, this is the Data Protection Commission; in the UK, this is the Information Commissioner’s Office (ICO).

Consumer rights. If you are a consumer resident in the UK or EEA, you keep the benefit of the mandatory consumer protection laws of your country and may bring proceedings in your local courts. See the Governing Law section of our Terms of Use.

10. Other regions

Australia. Antovate is an Australian company and this policy is intended to comply with the Australian Privacy Principles under the Privacy Act 1988 (Cth). You can contact the Office of the Australian Information Commissioner (OAIC) if you have an unresolved complaint.

United States, including California. We do not sell your personal information, and we do not share it for cross-context behavioural advertising, so the additional CCPA/CPRA rights (such as the right to opt out of sale or sharing) add nothing beyond what's already true of how we operate. You still have the rights described in section 7, including access and deletion.

Canada. We handle personal information in a manner intended to be consistent with PIPEDA's fair information principles; the rights in section 7 apply to you.

Brazil. We handle personal information in a manner intended to be consistent with the LGPD; the rights in section 7 apply to you, and you may also contact Brazil's ANPD.

11. Children

Disckreet is rated 17+ on the App Store and is not directed at children. We do not knowingly collect information from anyone under 17 (or the higher age required by local law). If you believe a child has used the app, contact us at privacy@disckreet.com.

12. Changes to this policy

If we make a material change to this policy, the app will ask you to review and accept the new version before you can continue using it. We keep a record of which version you accepted, and when. We’ll also update the "last updated" date at the top of this page.

13. Contact us

Questions, requests, or complaints about this policy: privacy@disckreet.com

1. Who these terms are with

Disckreet is provided by Antovate Pty Ltd ("Antovate", "we", "us", "our"), a company registered in Australia. By downloading, accessing, or using Disckreet (the "App"), you agree to these Terms of Use ("Terms"). If you don’t agree, don’t use the App.

You must be at least 17 years old, or the minimum age required in your jurisdiction if higher, to use Disckreet. This matches the App Store’s 17+ age rating for the App.

2. What Disckreet is

Disckreet is a private, end-to-end encrypted messaging and calling app designed for two partners to share photos, videos, text messages, and 1:1 audio and video calls. You pair with your partner using a QR code or a one-time code generated in the app.

The App is free to use with daily limits on how much you can share. Disckreet Pro removes these limits and is sold as a monthly auto-renewing subscription through Apple's In-App Purchase system (see section 6).

3. Your account

You don't need to give us your name, email address, or phone number to use Disckreet. Your account is identified by a randomly generated ID, and you choose a nickname that your partner will see. You're responsible for keeping your device, passcode, and any biometric app-lock secure, and for all activity and content shared under your account.

Because your account isn't tied to a recoverable identifier like an email address, losing access to your device without a working backup (such as iCloud Keychain, see our Privacy Policy) may mean permanent loss of access to your account and its content. This is a direct consequence of how the encryption in section 4 works, and we'd rather tell you plainly than gloss over it.

4. Encryption and content ownership

All content you share through Disckreet (messages, photos, and video) is end-to-end encrypted on your device before it is sent. We cannot read, view, or access the content of what you share; this is a property of the App's design, not a discretionary choice we make.

You own the content you share. Disckreet acts only as an encrypted conduit between you and your partner. We do not claim any ownership or licence over your content beyond what is technically necessary to transmit and temporarily store it in encrypted form (see our Privacy Policy for retention periods). Content may be lost or become inaccessible due to events outside our control, and we are not responsible for storing or reproducing it.

Content shared with you. Content your partner shares with you remains your partner's. They can revoke your permission to view it, or remotely delete it from your device, at any time, for any reason.

Retained control. A distinguishing feature of Disckreet is that sharing content with your partner does not mean giving up control of it. You can revoke your partner's permission to view something, or remotely delete it from their device, at any time, for any reason. Deleting content is generally permanent and irreversible once it has taken effect on your partner's device. We cannot restore it for you.

5. Acceptable use

Disckreet is intended for consensual, lawful use between adult partners. You agree not to use the App to:

• share, request, or facilitate any content involving minors, under any circumstances;
• share content with, or otherwise target, anyone without their consent;
• harass, threaten, or abuse another person;
• share content that is unlawful in your jurisdiction or your partner's;
• attempt to circumvent, disable, or interfere with the App's security, encryption, or anti-abuse mechanisms;
• reverse engineer, decompile, or extract code from the App, or copy, modify, sell, resell, rent, or distribute any part of it;
• send or transmit viruses or other harmful code, or gain or attempt to gain unauthorised access to our systems;
• create accounts through automated or unauthorised means, or use the App for any commercial, non-personal purpose without our permission; or
• use the App in any way that violates these Terms or applicable law.

We may suspend or terminate accounts that we reasonably believe breach this section. If we disable your account for a breach, you must not create another without our permission. Because of end-to-end encryption, we generally cannot review the content of reported messages or media directly; enforcement relies on account- and metadata-level signals and user reports, and we will explain the limits of what we can (and can't) act on if you report a concern.

6. Subscriptions and payment

Disckreet Pro is a monthly auto-renewing subscription, billed and processed entirely through Apple's In-App Purchase system. We never receive or store your payment card details.

Your subscription renews automatically at the end of each billing period unless you cancel at least 24 hours before renewal, in accordance with Apple's App Store subscription terms. You can manage or cancel your subscription at any time in your device's App Store account settings. Refunds are handled by Apple under its own refund policy; we are not able to issue refunds directly. You are responsible for any mobile data charges you incur using the App.

7. Licence, updates and third-party services

We grant you a limited, revocable, non-exclusive, non-transferable licence to use the App for your personal use, in line with these Terms. No other rights are granted by implication. The App may download and install updates automatically, and you agree to receive them.

The App may interact with third-party services (such as Apple's). Those services are governed by their own terms and privacy policies.

8. Disclaimers

The App is provided "as is" and "as available." To the fullest extent permitted by law, we disclaim all warranties, express or implied, including that the App will be uninterrupted, error-free, or completely secure.

We rely on iCloud Keychain (where you enable it) as the primary way to recover your encryption key if you lose your device; we strongly recommend enabling it. We are not liable for loss of content or account access resulting from a lost, reset, or replaced device where no working key backup exists. We are also not responsible for the actions of our users, including your partner.

Nothing in this section limits any liability that cannot be excluded or limited under applicable consumer protection law, including the Australian Consumer Law and equivalent UK and EU consumer protections.

9. Limitation of liability

To the fullest extent permitted by law, and subject to the carve-out for consumer protections in section 8, Antovate's total liability to you arising from these Terms or your use of the App is limited to the amount you have paid us in the 12 months before the claim arose.

Antovate is not liable for indirect, incidental, or consequential damages, or lost profits, to the extent such exclusion is permitted by law.

10. Indemnity

To the extent permitted by law, you agree to cover Antovate against losses and reasonable costs arising from your breach of these Terms or your unlawful use of the App.

11. Governing law and disputes

These Terms are governed by the laws of Victoria, Australia, and disputes will be dealt with in the courts of Victoria, Australia.

If you are a consumer resident in the United Kingdom or the European Economic Area: nothing in these Terms removes or reduces the protections you're entitled to under the mandatory consumer protection laws of your country of habitual residence, and you may bring proceedings in the courts of that country. We will not rely on the Victoria, Australia jurisdiction clause to prevent you from doing so.

If you are in Australia: nothing in these Terms excludes, restricts, or modifies any consumer guarantee, right, or remedy under the Australian Consumer Law that cannot lawfully be excluded, restricted, or modified.

12. Changes to these Terms

We may update these Terms from time to time. If we make a material change, the App will ask you to review and accept the updated Terms before you can continue using it, and we record which version you accepted and when.

13. Termination and severability

You can stop using the App and delete your account at any time. We may suspend or terminate your access if you breach section 5, or if we discontinue the App or a feature of it, with notice where reasonably practicable. If any provision of these Terms is found unenforceable, it will be removed and the rest will remain in effect.

14. Contact us

Questions about these Terms: legal@disckreet.com