Privacy Policy

What we do not collect or retain

• We cannot read your messages. Messages are end-to-end encrypted on your device before they leave it. Our servers transport encrypted blobs and cannot decrypt them.
• We do not store the content of your messages on our servers, not in plaintext, and not in any analytics system.
• We do not retain raw IP addresses. Your IP may be briefly processed in memory at the moment you connect, to route your traffic and prevent abuse, and is then discarded. We do not write it to databases, logs, analytics, or error monitoring.
• We do not train AI on your data. chat4000 does not include an AI model. The AI runs on your own system, outside our reach.
• We do not sell, rent, or monetize your data. Ever.
• We do not share data with advertisers. There are no ads in chat4000.
• We do not track you across other apps or websites.
• We do not collect your name, email, phone number, or account identifier. chat4000 does not require an account.
• We do not collect precise location. If geography is needed, we derive only coarse country information from the IP at the moment of connection and discard the IP immediately.
• We do not store your contacts.
• We do not record your screen.

On your device

The following stays on your device unless you send messages. We do not have a copy:

• Your chat history
• Your pairing credentials
• An Apple push token, so you can receive notifications
• A random per-install identifier, used for pairing
• Your preference for the "Share diagnostics and analytics" setting
• Deleting the app deletes all of this.

Through our relay

When you send or receive a message, our relay transports it between your device and the AI agent you've paired with. In the process, the relay necessarily sees:

• Routing identifiers, so the message reaches the right device
• Push tokens, for offline notification delivery
• Encrypted message envelopes. The message itself is encrypted and unreadable by us.
• Connection and timing information
• Your IP address is briefly visible to the relay while you are connected but is not stored or logged. If abuse prevention requires tracking traffic patterns, we do so using non-reversible hashes rather than by retaining raw IPs.
• Legal basis: performance of the contract under GDPR Article 6(1)(b) and legitimate interest in operating a secure service under Article 6(1)(f).
• Retention: up to 30 days for operational logs. Messages that can't be delivered immediately are queued in encrypted form and deleted after 7 days.

Service analytics

We run a self-hosted analytics system to understand how chat4000 is used and to improve reliability. It records lightweight events like "a pairing completed" or "a message was routed" and never the content of your messages.

Events are recorded with hashed identifiers, not the original group, device, or session IDs, coarse country information derived from your IP at ingest while the IP itself is discarded immediately and not stored in this system, app version, and a handful of technical details. We never store raw IPs, push tokens, secrets, or message content in this system.

Legal basis: legitimate interest in service improvement under GDPR Article 6(1)(f).

Retention: up to 12 months.

Diagnostics and analytics (in-app, when enabled)

chat4000 has a "Share diagnostics and analytics" setting. When it's on, the app sends anonymous usage events and crash reports to our service providers so we can fix bugs and understand how features are used. No message content, no names, no accounts. You can turn this off anytime in Settings.

Legal basis: your consent under GDPR Article 6(1)(a).

Push notifications

chat4000 uses Apple Push Notification Service to wake the app when a new message arrives. The push itself is silent and no content is included. Once your device wakes, the message is decrypted locally and shown to you. The message text never reaches us in readable form.

Inside encrypted messages

When you send a message, the encrypted payload includes basic sender information visible only to the other paired device:

• Your per-install device identifier
• A device name ("iPhone" on iPhone; your Mac's name on macOS)
• A timestamp
• This is not visible to us or anyone else besides you and the paired device.

The AI and the plugin are not chat4000

The AI model that responds to your messages is not part of chat4000. It runs on a system you control or connect to, whether that's your own machine, a self-hosted model, or a third-party API you've configured. What that AI does with your prompts is governed by whatever software or service you connected to, not by this policy.

Similarly, the plugin or agent host you pair with is software you install and run yourself. We are not responsible for what it does or what data it processes.

Service providers

We use a small number of service providers to operate chat4000:

• Apple, for push notification delivery and app attestation
• AWS and Hetzner, for cloud hosting for our relay and analytics infrastructure
• PostHog, for anonymous in-app analytics only when you have opted in
• Sentry, for crash and error reporting only when you have opted in
• We'll update this list if it changes materially.

International transfers

NeonNode is based in Hong Kong. Our infrastructure and service providers operate in other countries, including the United States and Germany. For users in the European Economic Area and the United Kingdom, we rely on the European Commission's Standard Contractual Clauses together with encryption in transit and end-to-end encryption of content as safeguards.

Your rights

• Your messages live on your device. Deleting the app deletes them.
• You can turn diagnostics and analytics off at any time in Settings.
• You can request deletion of any data we hold on our relay by emailing privacy@chat94.com with your group ID. We will respond within 30 days.
• EU and UK users have rights of access, rectification, restriction, objection, portability, and to complain to a supervisory authority.

Children

chat4000 is not intended for users under 18.

Changes

We will update this policy if our practices change. Material changes will be announced in the app.