sotvo

Privacy

sotvo has no accounts, no profiles, and no analytics tied to you. A room knows a code, not a person.

Your messages and calls are end-to-end encrypted

Keys are created on your devices and never leave them. Our servers pass along sealed envelopes and forget them. They cannot read your messages or hear your calls — there is nothing to hand over.

Everything expires

Rooms end on schedule or when burned. The temporary state a room needs while it is open lives in memory only; nothing is archived, on your device or ours. There is no message history to export, because none is kept.

The little we keep, and why

To run the service honestly, a few narrow, temporary records exist:

• Rate-limit counters keyed to a hashed IP address. These stop code-guessing and abuse. The key is hashed with a secret that rotates daily, so counters cannot be linked across days, and the raw IP address is never written to logs or to disk. The counters expire on their own.
• An opaque push mapping. If you turn on notifications for a room, we store a random identifier pointing to your device's push token, scoped to that room's lifetime and deleted when the room ends. A notification says only "activity in a room" — never the sender, the content, or the room code.
• Apple purchase verification. When you unlock, Apple handles the payment. We verify the receipt to confirm the unlock. No account is created and no payment details reach us.

Data requests

We hold no message content, no call content, no contact lists, and no identities. If someone asks us to hand over your conversations, there is nothing to give — by design.

---

sotvo is not yet released. This policy will be finalized and versioned with the release build. Questions can go to the address listed on the App Store page at launch.