sotvo has no accounts, no profiles, and no analytics tied to you. A room knows a code, not a person.
Your messages and calls are end-to-end encrypted
Keys are created on your devices and never leave them. Our servers pass along sealed envelopes and forget them. They cannot read your messages or hear your calls — there is nothing to hand over.
Everything expires
Rooms end on schedule or when burned. The temporary state a room needs while it is open lives in memory only; nothing is archived, on your device or ours. There is no message history to export, because none is kept.
The little we keep, and why
To run the service honestly, a few narrow, temporary records exist:
- Rate-limit counters keyed to a hashed IP address. These stop code-guessing and abuse. The key is hashed with a secret that rotates daily, so counters cannot be linked across days, and the raw IP address is never written to logs or to disk. The counters expire on their own.
- An opaque push mapping. If you turn on notifications for a room, we store a random identifier pointing to your device’s push token, scoped to that room’s lifetime and deleted when the room ends. A notification says only “activity in a room” — never the sender, the content, or the room code.
- Apple purchase verification. When you unlock, Apple handles the payment. We verify the receipt to confirm the unlock. No account is created and no payment details reach us.
- A report you choose to send. This is the one exception to “everything expires.” If you report a problem, your report — and, if you include them, your own copy of recent messages — is kept for up to 30 days so our safety team can act on it. It is the only time content leaves your device, and only because you chose to send it. Nothing is kept unless you tap report.
Data requests
We hold no message content, no call content, no contact lists, and no identities. If someone asks us to hand over your conversations, there is nothing to give — by design. The single exception is a report you chose to file, which exists for up to 30 days as described above.
sotvo is not yet released. This policy will be finalized and versioned with the release build. Questions can go to the address listed on the App Store page at launch.