1x1.im Privacy Policy

1. Core principle

1x1.im is built for anonymous communication. We do not ask for your legal name, phone number, email address, or government ID.

We do not build marketing profiles and we do not sell personal data. The operator cannot identify you as a natural person from the data the service holds.

2. What we do not collect

The service does not collect or retain data that identifies you in the real world.

• No legal name, postal address, phone number, or email for account creation.
• No message plaintext on the server — content is end-to-end encrypted on your device.
• No seed phrase or private keys — recovery material stays on your device only.
• No hosted wallet and no user fund balances on the server.
• No IP addresses or activity logs tied to your identity in production.
• No disclosure of personal data or user logs to third parties.

3. Direct connections

Our design goal is direct peer-to-peer communication between clients — including audio and video calls — without unnecessary intermediaries.

When a direct path cannot be established because of network conditions, the service may use a blind relay transport only to complete delivery. This is a fallback, not the default model.

Message and call content remain encrypted end-to-end; intermediaries used for transport do not receive readable content from our application layer.

4. Production storage

In production, the operator maintains a database only. No activity journals or user logs are kept.

The database holds the minimum fields required to operate the relay:

• 1x1 number — your public numeric identifier.
• Public signing keys — required to verify messages and establish encrypted sessions.
• Presence metadata — online/offline state and last-seen timestamps visible to contacts under product rules.
• Undelivered encrypted message envelopes for offline delivery within the published retention window — not decrypted message text.

5. Data on your device

Contacts, decrypted messages, and vault material are stored locally in your browser (IndexedDB) under your control.

Clearing site data or losing your recovery phrase can permanently remove access to local history. The server cannot restore encrypted chat content.

6. Your choices

You can stop using the service at any time. Local data can be removed via the app or browser settings.

Because the service is anonymous, the operator cannot verify real-world identity from stored data alone.

7. Updates

This policy may be updated to reflect product or legal changes. The effective date at the top will change accordingly.