Privacy and rules

Our Chat is a private, invite-only chat run by its admin for family and friends they invite. It isn't a company product and isn't sold or advertised. Questions or requests: message an admin in the app.

• Your account: your name, username, profile picture (if you add one) and password (stored scrambled, never readable). Names, profile pictures and group photos are visible to everyone on Our Chat and are not end-to-end encrypted.
• The devices you're signed in on.
• Your messages, photos, videos and files, but only end-to-end encrypted (calls go directly between the two devices, encrypted, and are never stored): the server stores scrambled data it cannot read (see below).
• Your public key, and your private key locked with your recovery code (the server can't unlock it).
• What the server needs to deliver messages: who is in which chat, when messages were sent, how big files are, reactions, pinned messages and how far you've read.
• Invite codes and who made them, and failed sign-in attempts (kept for 15 minutes, to stop password guessing).

No adverts, no tracking, no selling or sharing of your data, and no contact lists taken from your phone.

On Cloudflare's servers, restricted to data centres inside the European Union. An encrypted backup copy is kept by the admin so the chat can be restored if something breaks.

Only the people in that chat. Messages, photos, videos, files and link previews are end-to-end encrypted on your device before they're sent, and only the chat members' devices can unlock them. The admin and the hosting company cannot read them. Link previews are made by the sender's phone, so the website sees the sender's internet address, as if they'd opened the link.

Your recovery code unlocks your messages on a new device. Keep it safe. If you lose it and every device you're signed in on, nobody (including the admin) can recover your old messages.

Messages sent before end-to-end encryption started (14 November 2026) and reactions are not end-to-end encrypted.

Until it is deleted. A message you delete is removed for everyone straight away. Deleting your account removes all your messages, files and reactions. Backups and the server's 30-day undo history age out after 30 days.

• Change your name any time (Me, then Change my name).
• Delete any of your messages, or your whole account (Me, then Delete my account).
• Ask an admin for a copy of what is stored about you.

• Be kind. No harassment, threats or hate.
• Nothing illegal, and nothing you don't have the right to share.
• Don't share invite codes with people the admin hasn't agreed to.
• Admins can remove messages, disable or delete accounts that break the rules.

Our Chat is run by volunteers on a best-effort basis, without any guarantee that it will always be available or that nothing will ever be lost. It is not for emergencies: call 112 or 999.