🪷 Suchi Privacy Policy

Last updated: October 30, 2026 · Applies to the Suchi app (Android and iPhone)

The short version

Suchi is built so that we cannot read your messages. All messages, photos, videos, and voice notes are end-to-end encrypted on your device using the Signal protocol — with post-quantum (Kyber-1024) key exchange — before they go anywhere. We collect no personal information, require no phone number, no email, and no account.

What the app stores on your device

Your encryption keys, your Suchi ID, your contacts' IDs, and your chat history are stored only on your device, protected by the PIN you choose. Your PIN itself is never stored — only its salted mathematical fingerprint (a hash), so it cannot be recovered by anyone, including us. Screenshots are blocked app-wide, and photos you send never enter your phone's gallery. If you uninstall the app, all of this data is deleted.

What passes through our server

Suchi uses a small relay server (api.suchi.ca) whose only job is to move encrypted data between devices. It temporarily holds, in memory only:

• Public encryption keys — so other devices can encrypt messages to you. Public keys cannot be used to read messages.
• Encrypted messages awaiting delivery — held in server memory only (never written to a database or disk), deleted as soon as your device picks them up, and self-destructed after 7 days if undelivered. The server cannot decrypt them.

Nameless by design: the server's log records events only (for example, that "a registration happened") — it never writes down a user ID, a name, or who talks to whom. Every server restart wipes its memory completely. Even we, the owners of Suchi, cannot see, count, or list who uses it.

Free. Forever.

Suchi is completely free — no subscription, no trial clock, no card, no catch. There are no payments of any kind in the app, so there is no billing or payment data to collect, see, or store.

What we never collect

• No phone number, email address, name, or account of any kind
• No analytics, tracking, advertising, or third-party SDKs that collect data
• No access to your contacts, location, or device identifiers
• Photos and videos are only accessed when you explicitly choose to send one. Images are stripped of location (GPS) metadata before sending.

Permissions explained

• Internet — to send and receive encrypted messages.
• Camera / photos — only when you tap the camera or photo buttons to send a picture or video.
• Microphone — only when you record a voice note or make a call.
• Notifications — optional, to alert you of new messages and calls.
• Fingerprint / face — optional, to unlock your vault instead of typing the PIN.

Data sharing

We do not sell, share, or transfer any user data to anyone, for any reason. There is nothing to share — by design, we possess no readable user data.

Children

Suchi is not directed at children under 13 and collects no data from anyone, including children.

Changes

If this policy changes, the updated version will be posted at this address with a new date.

Contact

Questions? Email support@suchi.ca or visit suchi.ca.