Privacy notice

Draft of 4 October 2026

This is a draft. It describes what Tas Dial actually does today, but it has not yet been reviewed by a lawyer and is not final. If something here matters to a decision you are making, ask us and we will answer plainly.

The short version

We collect what is needed to deliver your messages and hold your files, and nothing for advertising. Your files and anything you attach to a chat are encrypted on your device before they reach us, so we cannot read them. We do not sell data, and there are no third-party trackers in the apps or on this site.

What we hold, and whether we can read it

Things we can read

Your account details: email address, phone number if you give one, and display name. We need these to sign you in and to let the right people find you.
Routing information: which accounts are in a conversation, when messages were sent, and how large they were. Delivering a message means knowing where to send it.
Delivery and read state, typing and presence, subject to the privacy settings you choose. Read receipts can be switched off.
The size and media type of files, so we can show you what is using your storage, and where a file sits in your folders.
Message text, for now. It is encrypted in transit and at rest and our servers never parse it, but until the end-to-end encryption work ships it is readable on the server in principle. We are building that on MLS (RFC 9420) and will update this notice when it is in place.
IP addresses, kept in full for 30 days and then shortened in our logs. They are used for security and abuse handling, never for analytics.
Push notification tokens, so your phone can be woken. The notification itself carries no sender, no name and no text.

Things we cannot read

Your password. Only a hash is stored, and it cannot be reversed.
The contents of your files and photos, and the file names and captions of private items. They are encrypted on your device with a key we never receive.
What you attach to a chat, including its name, caption and dimensions.
Your address book. It is never uploaded. Your phone works out who else is on Tas Dial by sending a short fragment of a one-way hash of each number, which is not enough to identify the number, and matching the answers locally. This is opt-in.
What is said in a call or meeting. Audio and video pass through to the other people in the call; they are not recorded or kept. Live captions are produced on your own device. If a host records a meeting, it records on their device, everyone in the room is told it has started, and we never hold a copy.

What the people who run the service can see

An operator can see account status, your devices (model and when they were last used), storage totals, and open invites, so they can help when something breaks. They cannot see your messages, your files, or the names of your private files, and they have no way to decrypt them. Every look at an account record is written to an audit log.

No trackers

There are no third-party analytics, advertising SDKs or session replay tools in the apps or on this website. Crash reports go to a server we run ourselves, with personal details stripped out before they are stored. Product metrics are counts on our own side, not profiles of individuals.

Who else is involved

We use a small number of suppliers to run the service: hosting and object storage for the servers and encrypted files, an email provider for sign-in and verification codes, and Google’s push service to wake Android phones. They handle data on our instructions and cannot read your encrypted files. We will keep an up-to-date list available on request.

How long we keep things

Messages and files stay until you delete them, or until you delete your account.
Deleted files sit in the recycle bin for 30 days and are then purged.
Full IP addresses are kept for 30 days, then shortened.
Backups are kept on a rolling schedule, so something you deleted may persist in a backup for a short period before it ages out.

Your data, and getting it out

You can export your data and delete your account. Because your files and private items are encrypted on your devices, part of an export is produced by your own app rather than by our server: the server packages your profile, settings, device list and file metadata, and your phone or browser decrypts and packages the rest.

Deleting your account removes your profile, your messages, your devices and sessions, and your files and the keys to them. Messages you have already sent to other people remain in their copies of the conversation, which we cannot reach into.

Export and deletion are being built now and are not yet available in the apps. Until they are, write to [email protected] and we will do it by hand.

Children

Tas Dial is invite-only and meant for a family, so children may well be using it on a parent’s invitation. An account is the responsibility of the adult who invited it. We do not profile anyone, of any age, for advertising.

Your rights

Depending on where you live, you may have the right to see what we hold about you, correct it, have it deleted, or object to how we use it. Ask us and we will help; we would rather sort it out directly than make you file something.

Changes

When this notice changes in a way that matters, we will say so in the app rather than quietly updating the page. The date at the top always tells you which version you are reading.

Getting in touch

Write to [email protected].