GLongP is an end-to-end encrypted messaging and calling app. This policy describes exactly what the app stores on your device, what it sends to our servers, and which third parties are involved. It reflects how the app actually works, feature by feature.
When you first open GLongP, the app generates a 12-word recovery phrase on your device. Everything else is derived from it: your account address, the key that encrypts your messages, and the keys that encrypt your local database and vault. We never receive the phrase, and we cannot regenerate it for you.
Your account address is a text identifier such as glp1…. It is
what other people add to reach you, and what our relay uses to route messages —
nothing more.
If you uninstall the app or lose the device without your recovery phrase, this data is unrecoverable. We cannot restore it for you, because we never had it.
| Data | Why | Retention |
|---|---|---|
| Account address | Route messages and calls to you | While the account is in use |
| Display name and public key | Shown to people you add as contacts | While the account is in use |
| Push tokens (Apple / Firebase) | Deliver call and message notifications when the app is closed | Until replaced or you delete your account |
| Encrypted message content | Relayed to the recipient | Queued only while the recipient is offline, deleted on delivery or after at most 30 days |
| Encrypted photos and files | Downloaded by the recipient | Deleted after at most 30 days |
| Group name, group ID and member list | Group membership management | Until the group is dissolved |
| Reports you file about other users (your address, the reported address, reason, note) | Review abuse reports within 24 hours | Until the report is resolved |
| IP address | Rate limiting to block abuse such as flooding | Not stored with your account |
| Online / offline presence | Show contacts whether you are reachable | Not stored after disconnect |
Private messages, group messages, shared photos and files are encrypted on your device with a key that only you and the recipient hold. Voice and video calls are peer-to-peer and encrypted (DTLS-SRTP). Our servers relay the encrypted bytes and the signalling needed to set up a call; they cannot decrypt the content.
Our servers can necessarily see metadata: which addresses exchange messages, when, and approximate sizes. We do not use this for profiling.
| Service | What it receives | When |
|---|---|---|
| Apple Push Notification service | Push token, encrypted notification payload | Incoming calls and messages (iOS) |
| Google Firebase Cloud Messaging | Push token, notification payload | Incoming calls and messages (Android) |
| Our relay / TURN server | IP address, encrypted call media | Only when a direct device-to-device connection is not possible |
We do not embed advertising networks, analytics SDKs or social media trackers.
The app requests no location permission of its own and does not collect your location. A system library may declare one; we do not read or transmit it.
In the app, Profile → Delete account wipes your device and deletes your server-side data (push tokens, queued messages, public key, uploaded files and group memberships) in one step. You can also email us — see Delete Your Data. You can revoke camera, microphone, photo and notification permissions in system settings; the related features stop working but the rest of the app continues.
GLongP is not directed at children under 13, and we do not knowingly collect data from them.
Material changes will be published on this page with a new date. Questions or requests: glongptech@gmail.com.