Privacy Policy

Last updated: March 2, 2026

Bytebit LTD ("we", "us", or "our") operates the Uniqum messaging platform and related services. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

1. Information We Collect

Account Information. When you register, we collect:

• Phone number (used for verification via WhatsApp OTP; stored only as a cryptographic hash)
• Display name (chosen by you)
• Device information (platform type: iOS, Android, desktop, web)

Messages and Content. Messages you send and receive, including text, photos, videos, files, voice messages, and other media. Messages sent via end-to-end encrypted chats are encrypted on your device and cannot be read by us.

Technical Data. We automatically collect:

• IP address (for rate limiting and security; not stored long-term)
• Device identifiers (randomly generated, not tied to hardware)
• Usage timestamps (last active, session creation)

2. How We Use Your Information

• Authentication: Your phone number is used solely to send a one-time verification code via WhatsApp. We do not store your raw phone number — only a SHA-256 hash for identity lookup.
• Service delivery: To deliver messages, media, notifications, and calls between users.
• Security: To detect abuse, prevent unauthorized access, and enforce rate limits.
• Improvement: Aggregated, anonymized data may be used to improve service reliability and performance.

3. Information Sharing

We do not sell your personal data. We share information only in these cases:

• With other users: Your display name and online status are visible to people you communicate with.
• WhatsApp (Meta): Your phone number is shared with Meta Platforms, Inc. solely for the purpose of delivering the verification code via WhatsApp. Meta's use of this data is governed by WhatsApp's Privacy Policy.
• Infrastructure providers: We use Cloudflare (hosting, CDN), Supabase (database), and Upstash (caching) to operate the service. These providers process data on our behalf under data processing agreements.
• Legal requirements: When required by law, court order, or to protect the safety of our users.

4. Data Storage and Security

Your data is stored on infrastructure operated by Cloudflare, Inc. (global edge network) and Supabase (PostgreSQL). We implement the following security measures:

• End-to-end encryption for private messages (Signal Protocol)
• TLS encryption for all data in transit
• Encryption at rest for stored data
• Cryptographic hashing of phone numbers (SHA-256)
• Rate limiting and brute-force protection on all authentication endpoints
• JWT-based session management with automatic token rotation

5. Data Retention

• Account data: Retained for as long as your account is active.
• Messages: Retained until you or the other party deletes them, or until the account is deleted.
• OTP codes: Automatically deleted after 10 minutes.
• Session tokens: Access tokens expire after 1 hour; refresh tokens after 30 days.
• IP addresses: Used only for real-time rate limiting; not stored persistently.

6. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data (e.g., update your display name).
• Delete your account and all associated data.
• Export your data in a machine-readable format.
• Withdraw consent for data processing at any time by deleting your account.

To exercise these rights, contact us at the address below.

7. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, please contact us.

8. Third-Party Links

Our service may contain links to third-party websites or services. We are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you visit.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the app or via email. The "Last updated" date at the top indicates the most recent revision.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us:

• Company: Bytebit LTD
• Email: privacy@buzzberry.net
• Website: buzzberry.net