Privacy policy

The short version

• Your messages, files and calls are end-to-end encrypted. SiliconBlast cannot read them.
• The server keeps what it needs to deliver messages and run your account.
• We do not show ads or sell your data.
• When you delete something, it is deleted.

What we cannot see

Messages, files, photos, voice notes and the audio and video of calls are encrypted on your device before they are sent. Only the devices of the people in the chat hold the keys to decrypt them. SiliconBlast does not have those keys, so we cannot read your conversations and we cannot hand them to anyone else. The security page explains how this works.

What the server stores

To deliver messages and run your account, the Rhema server stores:

• Your account details from SiliconBlast Identity: your name, your handle and your email address.
• Which chats you are in and who else is in them.
• When each message was sent and how large it is.
• The public keys of your devices, which other people need to send you encrypted messages.
• Push notification tokens for your devices.
• Encrypted messages and files. These are stored as encrypted blobs that the server cannot open.

Notifications

Push notifications never contain message content. A notification tells your device that something new has arrived. Your device then fetches the encrypted message and decrypts it itself. Apple and Google deliver the notification, so they see that your device received one and when.

Crash reports

We use Sentry to collect crash reports so we can fix bugs. Before a report leaves your device or our server, message content and personal data are stripped from it. A report contains things like the app version, the type of device and the error that happened.

We do not use analytics or advertising trackers in the apps or on this website.

Queravel

Queravel is the assistant built into Rhema. It reads a chat only when you ask it to do something with that chat, such as summarising a group or drafting a reply. It does not read your chats in the background. If you ask Queravel to send an email through Malakh or to find photos in Penielly, it shares only what that task needs, and nothing is sent until you approve it.

Disappearing messages and deletion

If you turn on disappearing messages in a chat, messages are removed from the server and from every device in the chat once the timer runs out. When you delete a message for everyone, it is removed from the server and the other devices are told to remove it. Someone in the chat could still have taken a screenshot or a copy before that happened.

Deleting your account

You can delete your account in the app's settings. This removes your account details, your devices and their keys, your push tokens and the encrypted messages and files that only you could read. Your name disappears from the chats you were in. Messages you sent to other people stay on their devices.

Who else is involved

We use a small number of providers to run Rhema. These include our cloud hosting providers, Apple and Google for push notifications, and Sentry for crash reports. They process data only to provide their service to us. We do not sell your data to anyone.

If your organisation runs its own Rhema server, that organisation controls the server and the data on it. Its own privacy policy applies to that server.

Your rights

You can ask us for a copy of the data we hold about you. You can also ask us to correct it or delete it. Email us and we will reply within 30 days.

Changes to this policy

If we change this policy, we will update the date at the top of this page. If a change affects how your data is used, we will tell you in the app before it takes effect.

Contact

Send questions about privacy to privacy@siliconblast.com.