1. Scope and responsibility

This policy applies to the Asslama mobile application, the Asslama communication service, and asslama.app (together, “Asslama,” “we,” “us,” or “the Service”). It does not cover websites or services operated independently by third parties.

2. Information we handle

Account and identity information

• Your chosen username, account identifier, public encryption key, and security fingerprint.
• Your phone number and verification-session information when you use phone verification, contact discovery, or SMS invitations.
• Your private encryption key is stored on your device. We do not intentionally receive it, except that an encrypted backup you choose to create may contain it.

Contacts

If you grant Contacts permission and choose contact discovery, the app may send phone numbers from your address book to the Asslama service to determine whether those numbers are registered. We do not need contact names, notes, postal addresses, or unrelated address-book fields for this purpose. You can deny or revoke Contacts permission in iOS Settings.

Messages, calls, and files

The app processes the messages, attachments, voice notes, and call media you choose to exchange. This content is stored on participating devices and protected in transit. Asslama’s signaling service processes routing instructions needed to establish a connection. End-to-end encryption protects content, but it does not hide all metadata, such as the identifiers involved, time of a connection, IP address, or traffic volume.

Technical and service data

We may process connection identifiers, public keys, IP addresses, timestamps, WebSocket and WebRTC signaling data, device or app version, notification delivery identifiers, error information, and security or rate-limit events. We use this information to connect users, prevent abuse, maintain reliability, and diagnose problems.

Backups and local data

Your account, contacts, messages, preferences, and cryptographic material may be stored locally on your device. If you create a backup, the app encrypts it with your chosen password before placing it in your iCloud Drive or before you export it. Apple or another destination you select processes that file under its own terms. Asslama does not know your backup password and cannot restore a forgotten password.

3. How we use information

• Provide registration, phone verification, contact discovery, messaging, calls, and user-requested invitations.
• Authenticate sessions, exchange public keys, route encrypted communications, and establish peer-to-peer connections.
• Provide notifications when enabled and save encrypted backups when requested.
• Protect users and the Service from spam, fraud, abuse, and security threats.
• Maintain, troubleshoot, and improve performance and reliability.
• Meet legal obligations and enforce our Terms of Use.

Where applicable law requires a legal basis, we rely on performance of our agreement with you, our legitimate interests in operating and securing the Service, your consent for optional permissions or features, and compliance with law.

4. When information is shared

We do not sell or rent personal information. We may disclose only what is necessary to:

• Other users: your chosen identity, public key, availability, and content you intentionally send.
• Service providers: hosting and network providers, Apple for iCloud or notification delivery, and Twilio for phone verification or SMS invitations. They process data on our behalf or as an independent service you use and are expected to protect it consistently with their agreements and applicable law.
• Legal and safety requests: comply with valid law, protect rights and safety, investigate abuse, or defend legal claims. End-to-end encryption may limit the content we are technically able to provide.
• Business changes: support a merger, financing, acquisition, or transfer, subject to appropriate confidentiality and continued notice of material policy changes.

5. Retention and deletion

• Unfinished phone-verification sessions are normally retained for up to 10 minutes. A successful verification marker is normally retained for up to 24 hours by the current service configuration.
• Live connection and signaling state is generally transient and removed when a session ends. Limited server logs may remain longer when reasonably needed for security, diagnostics, or legal compliance.
• Messages, contacts, and account keys stored on your device remain until you delete them, sign out, remove the app, or erase the device, subject to device backups.
• Encrypted iCloud backups remain until you delete them from iCloud Drive. Exports remain wherever you choose to save or share them.

You may request deletion of personal information controlled by Asslama using the contact method below. We may need to verify the request and may retain limited information where legally required or necessary to protect the Service. Deleting Asslama data does not delete copies already delivered to another user’s device or stored with a third-party provider you control.

6. Your choices and rights

You can manage Contacts, Camera, Microphone, Photos, and Notifications access in iOS Settings; choose whether to show message previews; choose whether to create a backup; delete local chats or contacts; and sign out to remove account-scoped local app data.

Depending on where you live, you may also have rights to request access, correction, deletion, restriction, objection, or portability, and to withdraw consent. You may complain to your local data-protection authority. These rights may be subject to lawful exceptions.

7. Security

Asslama uses device key storage, authenticated encryption for messages and backups, encrypted transport, and WebRTC media security. No system is perfectly secure. Protect your device, backup password, verification codes, and recovery files. If you lose your device or password, we may be unable to recover your encrypted information.

8. International processing

Asslama and its providers may process information in countries other than yours. Where required, we use legally recognized safeguards for international transfers. Local privacy laws may differ from those in your country.

9. Children

Asslama is not directed to children under 13, or under the higher minimum age required to consent to online services where they live. If you believe a child has provided personal information without valid permission, contact us so we can investigate and take appropriate action.

10. Changes and contact

We may update this policy as the Service or law changes. We will post the revised policy here and update the effective date; we will provide additional notice when a change materially affects your rights.

For privacy questions or requests, email privacy@asslama.app. If email delivery is unavailable, use the developer contact method shown on Asslama’s App Store product page.