Last Updated: July 31, 2026
Chatit is built on the principle of "private-by-design". We are a "zero-knowledge" platform, meaning we are architected to have no access to your message content. Privacy isn't an option; it's the foundation upon which this application is built.
Our messaging application uses state-of-the-art end-to-end encryption (E2EE). Your messages are encrypted on your device and can only be decrypted by your intended recipient. Neither we, nor anyone else, can read these messages.
This same end-to-end encryption (E2EE) principle applies to our Audio and Video Calls. The call's media stream is encrypted directly between you and the person you're calling. Your private conversations remain private, always.
The controller of the data processed through the Chatit application and website is INNOVATEX DESIGN SRL, registered in Romania, Cluj, Dej, Strada 1 Mai no. 41, Company ID (CUI) 48509212. You can contact us anytime at contact@chatit.ro for any privacy matter.
We collect the absolute minimum information required for the app to function. We never ask for your real name, email address, or phone number.
The following data is generated and stored exclusively on your device. We have no access to it, and deleting the app will permanently remove it (unless you have a manual backup).
We use the collected information (public keys, push tokens) strictly to:
We do not sell, rent, or share your information with third parties for marketing purposes. The only third parties we interact with are essential service providers for push notifications:
To deliver push notifications we use Google (Firebase Cloud Messaging) and Apple (Apple Push Notification service), which may process your `pushToken` on servers located outside the European Economic Area, including in the United States. These transfers rely on the European Commission's Standard Contractual Clauses and these providers' own compliance frameworks. We only send them an anonymous token and a generic notification. We never send them your message content, which is end-to-end encrypted.
You have full control over your data. You can delete your account at any time from within the app by navigating to Settings {'>'} App Data {'>'} Delete All Data. On your device the following are deleted immediately and irreversibly: your identity (recovery phrase and private keys), contact list, message history, call log, PIN, and settings. On our server, upon receiving the request cryptographically signed by your device, we delete your user row, meaning your `userId`, `publicKey`, `nickname`, `pushToken`s, platform, and registration date, together with all messages in transit to you that have not yet been delivered. The deletion is physical, not just logical: freed database pages are overwritten and the transaction journal is compacted immediately.
Deleting your account from the server requires an internet connection. If you press the button without internet, the app tells you and lets you choose: try again, or delete only the data on your phone, in which case the server account remains. You can delete it any time later, because your identifier is derived from your 12 word phrase: restore your identity, press the button again, and the request goes through. Alternatively, write to us at contact@chatit.ro.
Messages you sent to other people remain in the recipient's queue until delivery or for at most 30 days. They are end-to-end encrypted, so we cannot read them, and the recipient is waiting for them; we do not recall them, much as a posted letter cannot be recalled. Backups: up to 7 days. We take a daily encrypted backup of the database with automatic rotation, encrypted with keys the server does not hold, so the server cannot read its own copies. We keep a minimal deletion register consisting only of an irreversible hash of the identifier and a date, solely so that deletions can be reapplied if a backup is ever restored; it is deleted automatically after 30 days. Technical logs: may contain a fragment of the account identifier, and network logs the IP address, for error diagnosis and abuse prevention. Copies held by people you talked to: permanently, and beyond our reach. Your messages, identifier, public key, and nickname that your contacts saved live on their phones, not with us. The very property that stops us from reading your messages also stops us from deleting them. Push notifications: we delete the token from our database, so we can no longer send you notifications, but we cannot revoke it at Google or Apple; it becomes invalid on their side when you uninstall the app. Public statistics: the aggregate counters (messages delivered, calls made) are numbers unconnected to any individual account and are not deleted.
One important thing about your identifier. Your account identifier is not assigned by us: it is computed mathematically from your 12 word phrase. If you restore your account from the same phrase you will get exactly the same identifier, not because we did not delete it, but because it derives from something only you hold. If you want a clean break, generate a new phrase when reinstalling. Note also that if you still have the app installed on a second device with the same identity, that device will re-register your account automatically at its next start.
Chatit is intended for people who are at least 16 years old. We do not knowingly collect data from anyone under 16. If we learn that we have processed data of someone below this age without the consent of the holder of parental responsibility, we will delete it.
As a data subject under Regulation (EU) 2016/679 (GDPR), you have the following rights:
You can exercise these rights by contacting us at contact@chatit.ro. You also have the right to lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.
Our website, `chatit.ro`, uses strictly necessary cookies for basic functionality and our own privacy-respecting, first-party analytics (synux.ro), with no tracking cookies, no personal data, and nothing shared with third parties. We do not use advertising cookies.
We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page. You are advised to review this page periodically for any changes.
If you have any questions about this Privacy Policy, you can contact us at: contact@chatit.ro