Privacy Policy

Just Connect Here

1. Overview

We operate a messaging service based on the Matrix protocol. All messages are end-to-end encrypted. We have NO technical access to message content.

2. Data Controller

Joachim Christof Huben
c/o flexdienst – #11403
Kurt-Schumacher-Straße 74
67663 Kaiserslautern
Germany

Phone: +49 15679 698581
Email: mail@jch-technologies.de

3. Data Protection Officer

As a company with fewer than 20 employees regularly involved in automated processing of personal data, we are not required to appoint a Data Protection Officer pursuant to Art. 37 GDPR.

For data protection inquiries, please contact: mail@jch-technologies.de

4. Supervisory Authority

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestr. 2–4
40213 Düsseldorf, Germany

5. Data We Collect

• Username (chosen during registration)
• Email address (optional, for account recovery)
• Profile picture (optional, uploaded by user)
• Device IDs and encryption keys (for E2EE)
• IP address (temporarily in server logs, max. 7 days)
• Push token of your device (for notifications, see section 15)

6. Data We Do NOT Collect

• Message content (end-to-end encrypted, technically unreadable)
• Contact lists / phone books
• Location data
• Usage profiles or tracking data

We use NO cookies, NO Google Analytics, NO Facebook Pixel.

7. Legal Basis

Your data is processed on the basis of Art. 6(1)(b) GDPR (performance of a contract) – data processing is necessary for the provision of the messaging service.

8. Retention Period

• Account data: until account deletion
• Media in direct messages: automatically deleted after delivery (max. 48h)
• Media in groups: 7 days
• Server logs (IP): max. 7 days
• Push token: until the device is logged out or the account is deleted

9. Your Rights (GDPR Art. 15–21)

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object
• Right to lodge a complaint with a supervisory authority

10. Data Transfer to Third Countries

• Server location: Hetzner Online GmbH, Germany – accounts, messages and media are stored there exclusively
• Message content never leaves this server in readable form
• Sole exception: delivery of push notifications via the services of Apple (iPhone/iPad) and Google (Android) – without message content, see section 15
• NO tracking, NO advertising, NO sharing with Facebook or other third parties

11. Encryption

• All messages are end-to-end encrypted (Olm/Megolm)
• Transport encryption via TLS
• We CANNOT technically access message content

12. Hosting

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen, Germany
Data processing agreement pursuant to Art. 28 GDPR in place.

13. Camera Permission

The app uses the camera exclusively for scanning QR codes (adding contacts) and for taking photos/videos that the user voluntarily shares in chats. No camera data is stored or shared with third parties. The camera is only activated when the user explicitly initiates it.

14. Status Feed

• Posts in the status feed (text, images, videos) are end-to-end encrypted and only visible to the contacts you have shared them with – NOT readable on the server.
• For technical reasons, only metadata is visible on the server: sender, timestamp and the chosen expiry time of a post – required for the timely automatic deletion.
• Posts with an expiry time are automatically deleted at the chosen time, including their images and videos.
• Posts marked as “permanent” remain stored until you delete them yourself.

15. Push Notifications

So that you notice new messages even when the app is closed, we use the notification services of the operating systems. We have set them up so that the providers learn as little as possible.

Android

• Provider: Firebase Cloud Messaging (FCM) of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
• Google receives nothing but an empty wake-up signal: the push token of your device and the time. Sender, chat and message text are NOT transmitted.
• The app then fetches the notification directly from our own notification server in Germany.
• We use only the messaging service of Firebase – NO Firebase Analytics, NO Crashlytics, NO delivery statistics.
• On devices without Google services, delivery runs entirely via our own server.

iPhone and iPad

• Provider: Apple Push Notification service (APNs) of Apple Inc.; the contracting party in the EU is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland
• Apple receives the push token of your device, the time, the notice “New message”, the number of unread messages and randomly generated technical identifiers of the chat and the message. Sender names and message text are NOT transmitted – your device decrypts the message itself.

Applies to both

• Legal basis: Art. 6(1)(b) GDPR – a messenger cannot reasonably be used without notifications. You can switch notifications off at any time in the app or in your device settings.
• Processing by the parent companies in the USA (Google LLC, Apple Inc.) cannot be ruled out. Both are certified under the EU-U.S. Data Privacy Framework, for which an adequacy decision of the European Commission exists (Art. 45 GDPR).

Last updated: September 2026 | Child Safety