Privacy Policy for Zarq Messenger

Last Updated: October 7, 2025

---

Introduction

Welcome to Zarq Messenger (Zero-access Authenticated Real-time Query), a secure messaging application developed by an independent developer in India.

Your privacy is our top priority. This Privacy Policy explains how we collect, use, and protect your information when you use Zarq Messenger.

---

Information We Collect

1. Information You Provide

Account Information:

• Phone number (authenticated via Firebase, hash stored in database)
• Username
• Display name (optional)
• Profile picture (optional)

Content You Create:

• Messages (end-to-end encrypted)
• Photos, videos, and files you send (encrypted)
• Voice and video calls (not recorded)

2. Automatically Collected Information

Device Information:

• Device ID
• Operating system (Android)
• App version
• Device name (for multi-device support)

Usage Information:

• Last seen timestamp
• Online/offline status
• Message delivery status (sent, delivered, read)
• Call logs (duration, participants, time)

3. Information We Do NOT Collect

• ❌ Message content (we cannot read your messages due to end-to-end encryption)
• ❌ Payment information (no in-app purchases)
• ❌ Location data
• ❌ Contacts from your phone (we don't access your contact list)
• ❌ Browsing history

---

How We Use Your Information

We use your information to:

1. Provide the Service:

• Enable account registration and authentication
• Deliver messages between users
• Enable voice and video calls
• Send push notifications for new messages

2. Improve the Service:

• Fix bugs and technical issues
• Improve app performance
• Develop new features

3. Security:

• Prevent spam and abuse
• Detect and prevent unauthorized access
• Protect against security threats

---

End-to-End Encryption (E2EE)

What the server stores:

• Encrypted message content (unreadable without your encryption keys)
• Metadata (sender, recipient, timestamp)
• Message delivery status

What the server CANNOT see:

• Your actual message text
• Contents of photos/videos
• What you're discussing

---

Data Storage and Security

Where Your Data is Stored

• Database Server: PostgreSQL database hosted on secure servers
• File Storage: Encrypted media files stored on server storage
• Location: India (Bangalore region)

How We Protect Your Data

1. Encryption in Transit: All data sent between your device and servers uses TLS/SSL
2. Encryption at Rest: Messages and media are stored encrypted
3. Secure Authentication: Firebase Authentication with industry-standard security
4. Access Control: Only authorized systems can access the database
5. Regular Updates: We keep our security systems up to date

Data Retention

• Messages: Stored until you delete them
• Media: Automatically deleted after 180 days (or sooner if viewed by all recipients)
• Call Logs: Deleted after 30 days
• Offline Messages: Deleted after delivery or 30 days
• Deleted Messages: Permanently removed from servers

---

Third-Party Services

We use the following third-party services:

1. Firebase (Google)

Used for: User authentication, push notifications

Data shared:

• Firebase UID (unique identifier)
• Device push token
• Authentication information

Privacy Policy: https://firebase.google.com/support/privacy

2. Google Cloud Messaging (FCM)

Used for: Sending push notifications

Data shared:

• Device token
• Notification content (encrypted)

Privacy Policy: https://policies.google.com/privacy

---

Your Rights and Choices

You Have the Right To:

1. Access Your Data:

• View your profile information
• Export your message history (coming soon)

2. Delete Your Data:

• Delete individual messages
• Delete conversations
• Delete your account (removes all data)

3. Control Notifications:

• Enable/disable push notifications
• Customize notification settings

4. Control Privacy:

• Choose who can see your online status
• Choose who can see your profile picture
• Control read receipts

How to Exercise Your Rights:

• Delete Account: Settings → Account → Delete Account
• Delete Messages: Long press message → Delete
• Privacy Settings: Settings → Privacy

---

Data Sharing

We do NOT sell, rent, or share your personal information with third parties for their marketing purposes.

We may share information only in these limited circumstances:

1. With Your Consent: When you explicitly agree
2. Legal Requirements: If required by law, court order, or government request
3. Service Providers: With trusted partners who help operate the service (all under strict agreements)
4. Safety and Security: To protect against fraud, abuse, or security threats

---

Children's Privacy

Age Requirement:

• Users must be at least 13 years old to use Zarq Messenger
• Users under 18 must have parental/guardian permission

We do not knowingly collect information from children under 13.

If we discover that a child under 13 has created an account, we will delete it immediately.

Parents/guardians can contact us at zarqmessenger@gmail.com if they believe their child has provided us with information.

---

International Users

Zarq Messenger is developed in India and complies with Indian data protection laws.

If you use the service from outside India, your information may be transferred to and stored in India.

---

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Updating the "Last Updated" date
• Sending an in-app notification
• Posting a notice in the app

Continued use of the app after changes means you accept the updated policy.

---

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data:

Email: zarqmessenger@gmail.com

Developer: Zarq Messenger (Independent Developer, India)

We will respond to your inquiry within 7 business days.

---

Your Consent

By using Zarq Messenger, you consent to this Privacy Policy and agree to its terms.

If you do not agree with this policy, please do not use the app.

---