privacy policy

last updated: August 25, 2026

hqchat (listed on the App Store as DissQus) is an end-to-end encrypted messenger. This policy describes what the app and its servers do and do not collect. The guiding principle: it is built so that we cannot read your messages.

what we cannot see

Your messages are end-to-end encrypted on your device using an HQC-256 post-quantum key exchange and AES-256-GCM. The keys are generated on your device and never leave it. Our servers relay already-encrypted data between devices and are technically unable to decrypt it.

what we store

• Your username — the handle you choose, so others can find you.
• Your public key — needed to route encrypted messages to you.
• Friend connections — stored so we can deliver messages and presence.
• Undelivered messages — if you are offline, the encrypted message is held in your session on our message broker until your device reconnects. We cannot read it, and it is not written to any database.
• Push token — if you enable notifications, so we can wake your device. Notification payloads contain no message content.
• Subscription status — whether your account is active. Payment is processed by Stripe. We store a hash of your email address and your active/inactive status — never card details, and never the address itself.

what we do not collect

• No message content — we cannot decrypt it.
• No address-book or contact uploads.
• No advertising identifiers, ad networks or third-party ad trackers.
• No behavioural or advertising analytics, and no profiling for marketing. (We do collect limited crash and performance diagnostics — see below.)
• No selling or sharing of personal data, ever.

crash reports and diagnostics

We use Sentry (Functional Software, Inc.) for crash reporting and performance diagnostics. A report may contain the app and OS version, device model, language and region; the error or crash itself, including stack traces; and performance signals such as memory use and timing. On the server only, a report may include your username or public key when that is needed to reproduce a routing error.

Your encrypted messages are never included and remain unreadable to us and to Sentry. This data is used solely to diagnose stability problems — never for advertising, never to build a profile — and is not sold or shared. Sentry processes it as our data processor under its own privacy terms.

your private keys

Your identity's private key is stored in the device Keychain and Secure Enclave, protected by your device biometrics. It is never transmitted to us. If you delete the app or reset your data, the identity — and your ability to decrypt past messages on that device — is permanently lost. This is by design, and there is no recovery path.

deleting your account

You can permanently delete your account at any time from the app: settings → delete account. This removes your username, public key, friend connections, push token, queued messages and subscription record from our servers, and erases the data stored on your device. It cannot be undone.

data retention

Undelivered messages live only until delivery. Account data persists until you delete your account. Subscription records are retained as required for billing and tax purposes.

children

hqchat is not directed to children under 13 (or the minimum age in your country) and we do not knowingly collect their data.

third parties

We use Apple (push notifications), Stripe (payments), Cloudflare (network and edge) and Sentry (crash reporting). Each processes only the limited data described above under their own privacy terms.

changes

We may update this policy; material changes will be reflected by the date above.

contact

Questions about privacy: support@martinrougeron.me.