The short version is on our Privacy page. This is the full list, written to match what the software actually stores.
What we store, and why
- Account: your mobile number (used as your username), your display name, and a salted scrypt hash of your password. Purpose: to let you sign in and let people who know your number reach you.
- Device public keys: the public halves of your devices' encryption keys. Purpose: so others can encrypt messages to you. Private keys never leave your devices.
- Encrypted messages and files: ciphertext that only the devices in the conversation can open, until it is delivered, deleted by you, or expires.
- Metadata: who sent a message to whom and when, message and file sizes, group names and members, and that a call was set up. Purpose: delivery.
- Contacts you accepted and accounts you blocked. Purpose: message requests and blocking.
- Tasks, agreements, reports and report drafts. These are not end-to-end encrypted. Purpose: the features themselves.
- Security records: hashes of session tokens with a device label, failed sign-in counts, and a short log of security events (sign-ins, new devices, blocked messages by type, never content). If you enable two-step verification, its secret and hashes of your recovery codes.
- Identity verification (optional): if you choose to verify, the licensed partner checks you. We keep only a salted fingerprint to prevent duplicate accounts, the assurance level, and the date. We never store your Aadhaar number.
What we do not collect
Message content, photos of your face, your address book, your location, advertising identifiers, or analytics. This website sets no cookies and loads nothing from other sites.
What stays on your phone only
Your private keys, your Apna Chehra avatar settings (shared only inside encrypted messages), which messages you have read, and your disappearing-message choices.
Sharing
We do not sell or rent personal data. We share data only with the identity partner you choose, with service providers who host our servers under contract, or when required by Indian law. Because of end-to-end encryption, we cannot hand over message content we do not have.
Where data is kept
Our pilot servers are intended to be located in India. Details will be confirmed here before public launch.
How long
Account data is kept while your account exists. Expired disappearing messages are deleted from the server automatically. In the pilot, deleting an account is done by hand on request.
Your rights (DPDP Act 2023)
You may ask to access, correct or erase your personal data, withdraw consent, and nominate someone to exercise your rights. Write to us through Contact. You may also complain to the Data Protection Board of India.
Children
Namaskara is not intended for children under 18 without verifiable parental consent.
Changes
We will tell you about material changes in the app before they take effect.
