Security and privacy
Short and honest: what is end-to-end encrypted, what is stored on our servers and how you control it
Calls
End-to-end encryption
Audio and video are encrypted on the participants’ devices, so neither the media server nor we can listen to or watch them. Calls are not recorded or stored. You choose who can call you in the settings.
Chats and stories
Encrypted in transit
Messages, files and stories are encrypted on their way to the server and stored on Zeyt’s servers. Chats and stories are not end-to-end encrypted. Photos in stories lose their metadata, including where they were taken, when uploaded.
Apps in chats
No internet access
What you enter in apps does not leave Zeyt. Each app sees you under its own ID, which cannot be traced to your account. It gets your name and photo only if you allow it.
Account and sign-ins
Password stored only as a hash
We do not store your password itself. The token that keeps you signed in is kept in your phone’s secure storage: the Keychain on iPhone, the Keystore on Android. Every sign-in is listed in Devices; the city and country of a sign-in are worked out on our server, and the IP address is not kept with the session.
Pairx for MIREA students
Password not stored
In the built-in Pairx app, your MIREA password is sent to our server only to sign in to the university’s systems. The university session is stored encrypted, to request your timetable and scores on your behalf.
Your data
Export and deletion
You can get a copy of your data in your profile, and deleting your account erases your profile, friends, attendance history and chats. This cannot be undone.
The full text is in the Privacy Policy. Questions about your data: privacy@zeyt.org