LushPash privacy policy (draft)

This is a draft. Draft written from the blueprint and the code as built. It must be reviewed by a lawyer for each launch country (UK GDPR, UAE PDPL, Pakistan's data protection law as enacted) before publishing. The operating company, its address and a contact for data requests are still to be filled in.

Who we are. LushPash is run by [company], [address]. Contact: [privacy email].

What we cannot see. Your messages, photos, videos, voice notes, files and calls are end-to-end encrypted. They are encrypted on your phone and only the people you send them to can decrypt them. We cannot read them, and we cannot hand them to anyone.

What we keep, and why.

Your phone number, to create your account and send sign-in codes. We store it as a keyed hash, plus one encrypted copy used only to send codes.
Your profile (name, username, about, photo), shown to others according to your privacy settings.
Your devices' public keys and random device IDs, so messages reach each of your devices.
While a message waits for delivery, an encrypted envelope with who it is from and to. It is deleted once delivered, or after 30 days.
Public statuses and public channel posts, which you publish to everyone.
Reports you or others make, to handle abuse. A report of a private chat contains only the messages the reporter chose to send us.
Call records (who called whom, when, how long, which media server), kept for [period] for reliability and abuse prevention; never the call content.

Finding friends. Only if you tap "Find friends from contacts", the app sends the phone numbers in your contacts so we can tell you which ones use LushPash. We check them and do not keep them. You can stop people finding you by number in Privacy.

What we do not do. No advertising. No selling or sharing your data with data brokers. We never keep your address book.

Who processes data for us. Hosting providers, the SMS provider that sends sign-in codes, Apple and Google for notifications. Each only gets what it needs.

How long. [Retention table from Document 5.] Deleting your account (You → Delete account) removes your account and everything tied to it from our servers straight away; encrypted backups are deleted at the next cleanup.

Your rights. Access, correction, deletion, objection and portability, where the law gives them. Ask at [privacy email]. Most of your data is only on your own phone, under your control.

Children. LushPash is for people aged 16 and over.

Changes. We will tell you in the app before material changes take effect.