Privacy policy

This policy explains how Crypta, the messaging app published by CodeKits.shop (“we”, “us”), collects, uses and protects information when you use the Crypta iOS app and its service at codekits.shop.

Information you provide

• Account details: your email address, username, display name, password (stored only as a secure hash) and, if you choose to add them, a phone number and profile photo.
• Messages and attachments: the text, photos, files and voice messages you send, together with the conversations and groups you belong to, delivery and read status, and any send effect you choose.
• Scheduled messages: if you schedule a message, it is stored on our servers, encrypted in the same way as other messages, until it is sent. You can cancel it before then.
• Location: only when you choose to share a location or start live location sharing in a conversation. Crypta does not collect your location in the background when you are not sharing it, and you can stop live sharing at any time.
• Reports and support requests: the content of a report you submit, including the reported message, and any messages you send to us.

Information collected automatically

• Online status: whether you are online and when you were last seen. You can hide your online status in Settings.
• Technical and security information: we collect IP addresses, device and app information, language and region settings, and message timestamps to protect the service, prevent abuse, investigate reports and troubleshoot problems.
• Calls: voice and video calls connect using WebRTC. The server relays call setup signals and records that a call took place; it does not record the audio or video of your calls.
• Notifications: message alerts are created on your device while Crypta is running. No advertising identifiers are collected.

Encryption and access to content

Connections to Crypta use HTTPS, and messages are encrypted when stored on our servers using the encryption option selected for each conversation. Device-encrypted messages are encrypted on your iPhone before upload; Standard messages are encrypted by our server for storage.

Administrative review tools cannot retrieve E2EE conversation keys, decrypt E2EE messages or open attachments in those conversations. These restrictions also protect earlier E2EE messages if a conversation's encryption setting later changes. Administrators may review Standard server-encrypted content, security metadata and information you choose to submit in a report or support request to prevent abuse, investigate reports and protect the service. Submitting a report does not grant administrators access to the rest of an E2EE conversation.

Some conversation keys remain managed by the service for delivery and account access. The administrative restrictions above do not make Crypta a zero-knowledge or server-blind service. Encrypted database storage and restrictions in admin tools are different protections.

On your device, Crypta keeps an encrypted copy of recent conversations and attachments so you can read them offline. This copy is removed when you sign out or delete the app.

Disappearing, view-once and screenshot notices

• Disappearing messages: when a chat has a timer, each new message is removed from the conversation for everyone when its time is up. It is then permanently deleted from our servers within 30 days; we keep it only for that window so that reports of abuse can be reviewed.
• View-once photos: each recipient can open the photo once. It is not saved on their device, and it stays on our servers under the same rules as other attachments.
• Screenshots: if you take a screenshot while a chat is open, the chat shows a notice to its members.
• None of these features can stop someone photographing their screen with another device.

Features that stay on your iPhone

• Transcripts, translations and Catch up summaries are created on your iPhone using Apple's on-device speech recognition, Translation and Apple Intelligence. The audio and text are not sent to Crypta or anyone else for these features.
• Media library and reminders: each chat's index of photos, files and voice messages is built and kept on your iPhone in Crypta's encrypted storage. Follow-up reminders are scheduled on your iPhone, and their notifications never include the message or who sent it.
• Locked chats, chat themes and favourites are stored only on your device. Face ID and Touch ID are handled by iOS; Crypta never receives biometric data.
• Widgets and Live Activities show chat names, photos and unread counts, or your live location countdown, never message text, and never locked chats.
• Ghost mode: reading a message still clears your own unread count, but the sender is not shown a read receipt, and your online status and typing are hidden.

How we use information

• To create and operate your account and deliver messages and calls.
• To let people find you by your exact username, email or phone number.
• To keep the service secure, prevent spam and abuse, and act on reports.
• To provide Crypta Premium and verify subscriptions.
• To respond to support requests and comply with the law.

Crypta does not show advertising, does not sell your personal information and does not use it to track you across other companies' apps or websites.

Subscriptions

Crypta Premium is purchased through Apple In-App Purchase. Apple processes the payment; we receive a transaction record to confirm your subscription and never receive your card details. Manage or cancel subscriptions in your Apple Account settings.

Sharing

Your profile name, username and photo are visible to people you chat with and to people who search for your exact username, email or phone number. Your messages are shared with the members of each conversation. We share information only with service providers needed to run Crypta (such as server hosting), or where disclosure is required by law or necessary to protect someone's safety.

Retention and deletion

We keep your information while your account is active. You can delete your account at any time in Settings → Delete account. This permanently removes your profile, the messages you sent and their attachments from our servers. Records needed to meet legal obligations, resolve disputes or handle an open safety report may be kept for a limited period before deletion.

Your choices and rights

You can edit your profile, hide your online status, block people, stop location sharing, turn off notifications and delete your account in the app. Depending on where you live, you may also have the right to access, correct, export or object to the use of your information. Contact us to make a request.

Children

Crypta is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child has created an account, contact us and we will remove it.

Changes

We may update this policy. The date above shows when it last changed, and significant changes will be highlighted in the app.

Contact

Privacy questions and data requests: [email protected].