Privacy Policy
Last updated 2026-10-20 · 中文
Overview
Ghostline is a private messenger that needs no account. This policy explains what the Ghostline app and our server (p2p-chat.iamxmm.xyz) handle, why, and the choices you have.
Data we collect
- Anonymous identity: on first launch the app creates a random identity on your device and registers it with our server to get an access token. We do not ask for your name, phone number, email or a password.
- Device information: a device identifier, the device type and, if you allow notifications, a push notification token.
- Chat membership: a one-way hash of each chat's identifier, linked to your anonymous identity, so we can send notifications and check who may download a voice message. The chat key cannot be derived from it.
- Encrypted voice messages: the encrypted audio file you send. We cannot decrypt it, and it is deleted automatically after 7 days.
- Purchases: if you make an optional in-app purchase, the product, transaction ID, amount and Apple receipt, used to verify the purchase.
- Operational logs: request logs such as IP address and time, used to keep the service running and to prevent abuse.
What we do not collect
Your messages: text messages never reach our server, and we cannot read your voice messages
Contacts, location or advertising identifiers
No ads, no tracking across apps or websites, and we never sell your data
Messages and encryption
Every message is encrypted on your device with AES-256-GCM before it is sent, using a key that only the members of the chat hold. Text messages are published as encrypted events to public Nostr relays. Voice messages are encrypted on your device and uploaded to our server as ciphertext; the relays only carry a reference to the file.
Nostr relays are run by third parties. They see the encrypted content, a random public key for your device and timestamps, and may keep them under their own policies. They cannot read your messages.
Device permissions
- Microphone: used only while you hold the record button. The recording is encrypted on your device before it leaves it.
- Camera and photos: used only to scan an invite QR code, or to read a QR code from an image you pick. Images are not uploaded.
- Notifications: delivered through Apple Push Notification service. They contain a generic text, never your messages.
Data on your device
Your chats, keys and decrypted voice messages are stored on your device. Profile > Clear local data removes all of them.
How we use data
- To deliver notifications and voice messages
- To verify in-app purchases
- To keep the service stable, fix problems and prevent abuse
Retention and sharing
Encrypted voice messages are deleted after 7 days. Other server data is kept while you use Ghostline. We share data only with the providers needed to run the service (Apple for notifications and purchases), or when the law requires it.
Your rights
- Ask what data we hold about your anonymous identity
- Ask us to delete your device identity and related server data
- Contact us with any privacy question
Children
Ghostline is not directed at children under 13.
Changes
We may update this policy. The date at the top shows the latest version.
隐私政策
更新于 2026-10-20
概述
Ghostline 是一款不需要账号的私密聊天应用。本政策说明 Ghostline 应用和我们的服务器（p2p-chat.iamxmm.xyz）会处理哪些数据、用途是什么，以及你有哪些选择。
我们收集的数据
- 匿名身份：首次启动时应用在你的设备上生成一个随机身份，并在我们的服务器上登记以获取访问令牌。我们不要求你提供姓名、手机号、邮箱或密码。
- 设备信息：设备标识、设备类型；如果你允许通知，还有推送令牌。
- 会话成员关系：每个会话标识的单向哈希，与你的匿名身份关联，用于发送通知、校验谁可以下载语音。无法由它推算出会话密钥。
- 加密语音：你发送的加密音频文件。我们无法解密，7 天后自动删除。
- 购买记录：如果你进行了可选的应用内购买，会记录商品、交易号、金额和 Apple 收据，用于校验购买。
- 运行日志：IP 地址、时间等请求日志，用于保障服务运行、防止滥用。
我们不收集的内容
你的消息：文字消息从不经过我们的服务器，语音我们也无法读取
没有广告，不做跨应用或跨网站追踪，绝不出售你的数据
消息与加密
每条消息在发送前都在你的设备上用 AES-256-GCM 加密，密钥只有会话成员持有。文字消息以加密事件的形式发布到公共 Nostr 中继。语音在你的设备上加密后以密文形式上传到我们的服务器，中继上只传递文件的引用。
Nostr 中继由第三方运营。它们能看到加密后的内容、你设备的随机公钥和时间戳，并可能按各自的政策保留；它们无法读取你的消息。
设备权限
- 麦克风：只在你按住录音键时使用，录音离开设备前已加密。
- 相机和相册：只用于扫描邀请二维码，或识别你选中图片里的二维码，图片不会上传。
- 通知：通过 Apple 推送通知服务发送，内容是通用提示，不包含你的消息。
设备上的数据
你的会话、密钥和解密后的语音保存在你的设备上。在「我」页面点「清除本地数据」可以全部删除。
数据用途
- 发送通知、传递语音
- 校验应用内购买
- 保障服务稳定、修复故障、防止滥用
保存期限与共享
加密语音 7 天后删除。其他服务器数据在你使用 Ghostline 期间保留。我们只会与运行服务必需的服务商（Apple 的推送和支付）共享数据，或在法律要求时提供。
你的权利
- 查询我们保存的与你匿名身份相关的数据
- 要求删除你的设备身份及相关服务器数据
- 就隐私问题联系我们
儿童
Ghostline 不面向 13 岁以下儿童。
政策变更
我们可能更新本政策，页首日期为最新版本的日期。