Privacy Policy

1. General provisions

This Privacy Policy describes how WindChat (the mobile application and the website windchat.net, hereinafter the "Service") processes and protects personal data of users. WindChat is a messaging service operated by Ostwind. By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

2. Information we collect

We collect the following categories of data: Account data: display name and phone number provided during registration and profile settings. Messages: text, images, files, voice notes, and other content you send or receive in chats. Contacts: if you grant permission, we access phone numbers from your address book to show which contacts already use WindChat; we do not store your full contact book on our servers beyond what is needed for matching. Location: when you share it in a chat; when Nearby is enabled (to find people nearby); and when Location history is on in Security (you can turn this off). Push notification tokens: to deliver message alerts. Technical data: IP address, device type, operating system, app version, and interaction logs needed to operate the Service. Diagnostic data: error reports that may include app version and device model; for signed-in users these may be linked to your account for support. Media from camera and photo library: when you set a profile photo, scan QR codes, or attach files to messages.

3. How we use information

We use collected data to: provide messaging, delivery, and read receipts; authenticate your account and protect against abuse; send push notifications about new messages; improve reliability and security of the Service; comply with applicable law; respond to support requests. We do not use third-party advertising or analytics SDKs in the WindChat app.

4. Storage and security

We protect data with layered controls: HTTPS/TLS for all connections; AES-256-GCM encryption of native API request/response bodies; HMAC-SHA256 signed requests with short-lived timestamps; bcrypt hashing for passwords and OTP secrets; rate limits and temporary lockouts against brute-force abuse; optional Apple App Attest and DeviceCheck on iOS builds; HttpOnly session cookies on the website and Keychain storage for tokens in the iOS app; secrets and runtime data kept outside the public web document root. Messages and account data are stored on secured infrastructure while your account is active. Optional server-side encryption for stored chat fields may be enabled by operators. WindChat is not an end-to-end encryption product: the service processes content to deliver messages. We retain diagnostic logs for a limited period (for example, up to 12 months). When you delete your account or request erasure, we delete or anonymize personal data within a reasonable time unless retention is required by law.

5. Device permissions

The app may request: Notifications — to alert you about new messages. Contacts — to find friends on WindChat (optional). Camera — for QR scanning and capturing photos for chats or profile. Photo library — to attach existing images. Face ID / Touch ID — optional app lock; biometric data never leaves your device. Location — to share in chats, for Nearby when enabled, and for Location history when enabled in Security (may include background updates if you allow Always). You can revoke permissions in iOS Settings at any time; some features may stop working.

6. Sharing with third parties

We do not sell personal data. We do not share messages with advertisers. We may use infrastructure providers (hosting, push delivery) under confidentiality obligations solely to operate the Service. We may disclose data when required by law or to protect users and the Service from fraud or harm. If we add new subprocessors, we will update this policy.

7. Your rights

Depending on applicable law, you may: access personal data we hold about you; correct inaccurate profile information in the app; request deletion of your account and associated data; withdraw consent where processing is consent-based; restrict certain processing. Contact us using the details in section 11 to exercise these rights.

8. Cookies and similar technologies

The windchat.net website may use strictly necessary cookies for language preference and security. The WindChat iOS app does not use browser cookies. You can control cookies in your browser settings; blocking them may limit website functionality.

9. Children

The Service is not directed to persons under 16. We do not knowingly collect personal data from children. If you believe a child has provided data without parental consent, contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy. Material changes will be communicated in the app or on the website. Continued use after changes take effect means you accept the updated policy.

11. Contact

Questions about this Privacy Policy or your data: Website: windchat.net Email: support@windchat.net We do not sell your personal data.