OBSIDIAN

Privacy Policy

Last updated: 2026-05-20

This Privacy Policy describes how the OBSIDIAN messenger ("OBSIDIAN", "we", "us") handles information when you use the mobile app and related services (the "Service").

1. What we collect

  • Account data. When you sign up, we store the username you choose and a securely-hashed password. If you choose the email-based sign-up, we also store your email address and the code we sent to verify it. If you choose username-only sign-up, we don't ask for an email or a phone number.
  • Profile data. An avatar if you upload one, and a display name if you set one.
  • Messages and media. The messages, voice notes, photos, videos, and files you send. Message content and media references are stored on our servers in encrypted form, so that they can be delivered to your conversation partners. They are decrypted on your device, not on ours.
  • Call data. A log entry per call: participants, start time, end time, status (completed, missed, declined, cancelled), and call type (audio or video). We do not record the audio or video of your calls.
  • Device data. The push-notification token your device gives us (used only to deliver pushes about new messages and calls), your chosen app language, and the device identifier for your active session.
  • Diagnostic data. Server logs may contain IP addresses, timestamps, and error traces. They are kept for up to 30 days and used only for debugging and to prevent abuse.

2. How we use it

We use this data to make the Service work: route messages, deliver calls, send push notifications, keep your account in sync, and run the infrastructure. We do not sell your data and we do not use it for advertising.

3. Encryption

Connections between the app and our servers are encrypted. Message contents and media are stored on our servers in encrypted form — if our disks were stolen tomorrow, what's on them would not be readable. Passwords are never stored in plain form. Calls are protected between you and the other participant.

4. Our infrastructure

OBSIDIAN runs on hardware we own and operate ourselves. We do not host on third-party clouds, and we do not share infrastructure with other companies. Backups are encrypted and kept on the same hardware as the rest of the Service.

5. Third parties

  • Push notifications. To deliver pushes about new messages and incoming calls, we hand a small payload to Firebase Cloud Messaging (operated by Google). Firebase receives the push token of your device and a notification envelope — never the content of your messages. See the Google Privacy Policy.

That's the entire list. No analytics SDKs, no ad networks, no crash-reporting services that ship data off our servers.

6. How long we keep things

Account data, messages, and media are kept for as long as your account exists. When you delete a single message, it is removed from our storage. When you delete a chat, all the messages and media of that chat are removed. When you delete your account, your data is erased from our active systems within 30 days. Backups are overwritten on their normal rotation.

If you've turned on disappearing messages for a chat, the messages in that chat are removed automatically on the schedule you set — both from your devices and from our servers.

7. Your rights

You can edit or delete your account data at any time from inside the app. To request a full export of the data we hold about you, or to ask any other question about your data, write to hello@obsidn.chat.

8. Children

OBSIDIAN is not intended for users under 16. We do not knowingly collect data from anyone under that age. If we learn we have, we delete it.

9. Changes

If we change this policy in a material way, we will update the "Last updated" date above and, where appropriate, notify you inside the app before the change takes effect.

10. Contact

Questions, requests, complaints: hello@obsidn.chat.

← Back to home