Privacy Policy
Last Updated: August 16, 2026 | Effective Date: August 16, 2026 | Domain: https://eme-chat.online
1. Overview & Zero-Knowledge Commitment
EmeChat ("we", "our", or "us") operates the website https://eme-chat.online and the EmeChat Android mobile application. We are committed to protecting user privacy through end-to-end encryption and zero-knowledge data architecture.
This Privacy Policy details our data minimization practices, cryptographic security guarantees, contact discovery handling, and your rights regarding complete account purge.
2. Data Processing & Technical Disclosures
A. Phone Number Authentication
We collect your mobile phone number solely for account creation and SMS OTP verification powered by Google Firebase. Your phone number serves as your unique account identifier.
B. Ephemeral Contact List Synchronization
With your explicit runtime permission (`READ_CONTACTS`), EmeChat scans your phone address book strictly for friend discovery (`POST /api/users/match-contacts`). Phone numbers are processed ephemerally in-memory and normalized using E.164 formatting. We never store, harvest, sell, or commercialize your address book.
C. Messages, Media & On-Device Translation
All 1-on-1 and group chat messages, audio recordings, and media files are end-to-end encrypted on your device using the Signal Protocol (`libsignal`). Speech translation (ASR & TTS) is executed locally on-device using offline models (Sherpa-ONNX & Piper VITS). EmeChat servers operate as an encrypted relay and cannot read, intercept, or produce unencrypted message text.
3. Signal Protocol E2EE & Law Enforcement Disclosures
EmeChat implements military-grade end-to-end encryption based on the Signal Protocol Curve25519 Double Ratchet algorithm.
- Private keys are generated locally and isolated inside Android hardware KeyStore containers.
- No EmeChat administrator or engineer has access to private decryption keys.
- Because we operate a zero-knowledge architecture, EmeChat is mathematically incapable of providing unencrypted message content or call recordings to any third party, law enforcement agency, or court authority.
4. Android Runtime Permissions
5. Data Retention & Account Deletion Policy
In compliance with Google Play Developer Policy, EmeChat provides instant account deletion:
Option A: Instant In-App Deletion
Open EmeChat app $\rightarrow$ Settings $\rightarrow$ Account $\rightarrow$ Tap Delete Account.
Immediately purges active session tokens, display profile data, and Signal E2EE key bundles.
Option B: Email Manual Support Deletion
Send an email to support@eme-chat.online with subject "Account Deletion Request".
Manual deletion requests are executed within 48 hours.
6. Children's Privacy (13+ Requirement)
EmeChat is strictly not intended for children under 13. We do not knowingly collect personal data from children under 13. If discovered, such records are immediately destroyed.
7. Grievance Redressal Officer (IT Rules 2021 Compliance)
In accordance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 under Section 79 of the Indian Information Technology Act, 2000, the contact details of the Grievance Redressal Officer for EmeChat are provided below: