Privacy Policy
Effective: October 20, 2026
Sogon (the “Service”) is built on the principle that conversations are not stored on our servers. This policy explains what information the Service processes, why, how long it is kept, and how it is deleted.
1. What we do not collect
- Message content and original photos: encrypted on the sending device (AES-256-GCM) before delivery; the server cannot read them. Ciphertext is deleted as soon as it is delivered to the receiving device, and undelivered ciphertext is deleted automatically after at most 7 days.
- Chat encryption keys: stored only on each device; the original key is never sent to the server. A new device receives the key from a device already in the chat, sealed with the new device’s public key. The server cannot open these sealed boxes.
2. Information we process and why
| Data | Purpose |
|---|---|
| Google account email and name | Sign-in, account identification, default display name |
| Display name, @ID, ID search setting | Showing your name to contacts, finding friends |
| Friend connections, chat memberships, chat names | Friend list, chat list, verifying message recipients |
| Device data (PC/phone type, device public key, hash of device secret, last seen time, whether the chat is being viewed) | Device authentication, connecting new devices, avoiding duplicate alerts |
| Web push subscription (notification endpoint issued by your browser) | New message alerts (alerts never include content) |
| One-time invite tokens and connect codes (hashed, or 10-minute codes) | Inviting a partner, connecting friends |
| Block list, public keys of signed-out devices | Stopping contact with people you block, keeping signed-out devices from reconnecting |
| Sealed chat key boxes (encrypted with a device’s public key) | Letting a new device join a chat right away even when the other devices are offline |
3. Retention
- Account data: until you delete your account, then deleted immediately.
- Ciphertext awaiting delivery: deleted on delivery, at most 7 days.
- Friend invite links: deleted once used, or after they expire (7 days). Connect codes expire after 10 minutes.
- Sealed chat key boxes: discarded as soon as that device connects, or immediately when the chat’s devices change.
- Message content: never on the server; deleted from each device when you leave the chat or delete your account.
4. Service providers and international transfer
We use the following providers to run the Service. Only ciphertext of your messages ever reaches them.
- Supabase Inc. (USA) — database and sign-in; data located in the Seoul, South Korea region
- Vercel Inc. (USA) — website hosting and sending alerts
- Google LLC (USA) — Google sign-in
- Browser push services (Google, Apple, Mozilla, etc.) — delivering alerts (content-free signals only)
5. Data stored on your device
Your sign-in session and settings (theme, alert style, language) are kept in your browser’s local storage, and messages and keys in your browser’s IndexedDB. We do not use advertising or tracking cookies.
6. Security measures
- End-to-end encryption: every message and photo is encrypted on the sending device with AES-256-GCM and can only be decrypted on receiving devices. Each device has a private key (ECDH P-256) that cannot leave the browser, and chat keys are only ever delivered sealed with these keys.
- Minimal retention: the server holds only ciphertext, and only until delivery. Notifications never contain message content.
- Access control: direct access to every database table is blocked; data is handled only through defined functions that check the device secret or sign-in session. The website applies a Content Security Policy that only lets data be sent to our own servers.
- Device management and key rotation: you can review signed-in devices in the Me tab and sign out any device you don’t recognize; it cannot reconnect. When a device or member leaves a chat, the chat key is replaced automatically.
- Verification: each chat has a safety number. Compare it with your partner to confirm no unknown device has joined.
- On-device retention: you can have messages older than a period you choose deleted from a device automatically.
7. Your rights
- You can change your display name, @ID and search setting at any time in the Me tab.
- Delete account: in the Me tab, tap ‘Manage account’ › ‘Delete account’ at the bottom. Your account and related data are deleted immediately; 1:1 chats disappear from your partner’s devices too, and you leave your group chats.
- For any other request to access, correct, delete or stop processing your data, email us and we will handle it without delay.
8. Children
The Service is not intended for children under 14, who may not sign up.
9. Contact
Email: l89192164@gmail.com
10. Changes
If this policy changes, we will post a notice on this page at least 7 days before the change takes effect.
The Korean version is the original. If the two versions differ, the Korean version prevails.