ScaChat Privacy Policy
Last updated: November 14, 2026
Who we are
ScaChat is a messaging app for chats, calls, groups, stories and games, available on Android and iOS. ScaChat is created and operated by Sacarove Technologies Inc. ("we", "us"). This policy explains what information ScaChat collects, why, and the choices you have. It applies to the ScaChat app and to our servers at api.scachat.com.
We built ScaChat so that we know as little about you as possible. We do not sell your personal information, we do not show ads, and we do not use your messages for advertising or profiling.
What we can never see
Your messages are end-to-end encrypted. They are locked on your phone and can only be opened on the phones of the people you send them to. ScaChat staff and our servers cannot read them.
This covers:
- Private messages, voice notes, photos, videos and documents
- Group posts and comments
- Stories and story replies
- Scheduled messages and scheduled stories, which are sealed on your phone before they reach our server
- Shared locations
- Voice and video calls, which are encrypted between the two phones
The encryption uses vodozemac, an audited open-source implementation of the Olm and Megolm protocols. Our servers only store encrypted copies until they are delivered.
The one exception is a report: if you report a message, your phone sends us the messages you chose to include, so our team can review them.
Information we collect and why
| Information | Why we need it |
|---|---|
| Phone number | To create your account and sign you in with a code sent by SMS |
| Display name, profile photo, username, bio and link | To show you to the people you chat with; you choose what to fill in |
| Email address (optional) | To recover your account; we verify it with a code |
| Date of birth (optional) | To check age for features restricted to adults, such as the Flirty game |
| Device information (device ID, app version) | To deliver messages to each of your phones and let you see and remove your devices |
| Encryption public keys | So other people's phones can encrypt messages for you |
| Who you have talked to and groups you belong to | To deliver messages, apply your privacy settings and block lists |
| Online status and last seen | To show your status, as your privacy settings allow |
| Encrypted messages and media waiting for delivery | To deliver them; we cannot read them |
| Reports you send | To review abuse and keep ScaChat safe |
| Premium and coin purchase receipts, coin balance | To confirm purchases with Apple or Google and keep your coins |
| Gifts sent and received, purchase prices and currencies, and gift earnings | To record your coin balance and calculate gift earnings; withdrawals are not currently available |
We also keep basic security logs, such as sign-in attempts and IP addresses, to protect accounts and prevent abuse.
Phone permissions
ScaChat only asks for a permission when you use a feature that needs it. You can refuse or turn any of them off in your phone's settings.
- Contacts: to find which of your contacts use ScaChat. Your phone sends their phone numbers to our server to check for matches. We do not keep the numbers that are not ScaChat users, and we do not keep your address book.
- Location: only when you choose to share a location or a live location in a chat. It is sent encrypted to that person, and live sharing stops when you end it.
- Camera and microphone: for photos, videos, voice notes, and voice and video calls.
- Photos and files: only the items you pick to send.
- Notifications: to tell you about new messages and calls.
Service providers we use
We use a small number of providers to run ScaChat. They process data only to provide their service to us.
| Provider | What it does for ScaChat |
|---|---|
| Render | Hosts our servers (api.scachat.com) |
| Supabase | Database and storage for encrypted media and profile photos |
| Twilio | Sends sign-in codes by SMS and relays calls when a direct connection is not possible (it cannot hear the calls) |
| Email provider (Resend or SendGrid) | Sends email verification codes |
| Apple App Store and Google Play | Process Premium and coin payments; we never see your card details |
We may share information if the law requires it, for example a valid court order. Even then, we cannot hand over the content of your messages, because we do not have it.
How long we keep data
| Data | How long |
|---|---|
| Encrypted messages waiting for delivery | Until your phone receives them |
| Encrypted photos, videos and files | Up to 30 days, then deleted |
| Stories | 24 hours at most |
| Scheduled messages and stories | Until they are sent or you cancel them |
| Group posts | While the group exists |
| Account and profile | Until you delete your account |
| Reports | As long as needed to review them and keep ScaChat safe |
Your chat history is stored on your own phone, not on our servers.
Your choices and rights
- Privacy settings: choose who sees your photo, last seen, online status and stories, and who from your groups can message you.
- Block and report: block anyone, and report abuse from a chat or profile.
- Devices: see the phones signed in to your account and remove any of them.
- Delete your account: in Settings, Account, Delete account. We send a code to your number to confirm. Your profile, devices, keys and pending messages are then deleted from our servers. Groups you created stay with their other members.
- Access or correct your data: you can edit your profile in the app, or write to us for a copy of the data we hold about you.
Depending on where you live, you may have more rights under local law, such as asking us to stop processing your data. Write to us and we will answer within 30 days.
Children
ScaChat is intended only for adults aged 18 and over. People under 18 must not use ScaChat. If you believe a person under 18 has an account, contact support@sacarove.com so we can investigate and take appropriate action.
Premium
Premium is a subscription bought through the App Store or Google Play. Apple or Google handle the payment; we only receive a receipt to confirm it. You manage or cancel it in your App Store or Google Play account.
Props, coins and earnings
You can send props to people in chats and groups, paid with coins. Coins are bought in packs through the App Store or Google Play, like Premium: Apple or Google handle the payment and we only receive a receipt to confirm it. Coins you buy can't be exchanged for money.
Eligible gifts accrue recipient earnings equal to 55% of the store-recorded purchase price of the coins spent on those gifts, before Apple or Google fees. We allocate spent coins from the oldest purchase first and keep each purchase currency separate. Sandbox/test purchases do not accrue real earnings. We keep purchase transaction identifiers, verification tokens, prices, currencies, gift records and earnings allocations to verify purchases and prevent fraud. Purchase verification records may be retained after account deletion to prevent receipt reuse and meet accounting obligations. Earnings have a 30-day hold and remain subject to refunds and reconciliation. Withdrawals are not available in this release; no payout provider is currently active. Purchased coins cannot be redeemed for cash.
Security
We use end-to-end encryption, encrypted connections (HTTPS) and limited staff access. No system is perfectly secure, so please keep your phone locked and your app lock on.
Changes to this policy
We will post any change on this page and update the date at the top. For important changes, we will also tell you in the app.
Contact us
Questions or requests about your privacy: support@sacarove.com
Sacarove Technologies Inc.