ContéPrivacy policy
This policy covers Conté, the private messenger for iPhone and Android. Conté is operated by Cajun App Factory, LLC, in Louisiana, USA.
Questions: support@contechat.com.
Summary
- Message text and chat photos are end-to-end encrypted on your device before they’re sent. We cannot read them.
- We don’t run ads, and we don’t include Firebase Analytics or Crashlytics in the app.
- You sign in with Apple or Google. Conté doesn’t ask for a phone number.
- Some account and chat metadata (who talks to whom, when, friend status, receipts) is stored so the app can work.
- Your display name and profile photo are visible to any signed-in Conté user. Age check details, last-seen, and the rest of your profile stay private. Someone still has to be your friend before they can message you.
- Debug logs leave your phone only if you tap Send debug log.
Who this covers
Conté is for people 18 and older. During setup we ask for your date of birth on your phone to confirm that. The date of birth is checked locally and is never stored or uploaded. We only keep a yes/no flag that you passed the check, plus when you passed it.
Account and sign-in
You create an account with Sign in with Apple or Google, through Firebase Authentication. Apple or Google may share with us an account ID, and (depending on what you allow) an email address and name. We use that only to sign you in and run your Conté account.
After sign-in you choose a unique display name. Conté stores:
- your Firebase user id (an internal id, never shown in the app)
- your display name
- whether you passed the 18+ check, and when
- when the account was created and when you were last seen by the app
- optional profile photo path / URL
Display names are reserved so two people can’t claim the same one. There is no public directory: names can’t be listed; someone finds you only by typing your exact name.
What other people can see
- Name and photo. Any signed-in Conté user can see your display name and profile photo (including people who are not your friends). They cannot read your age-check flag, last-seen time, or other private profile fields. Messaging still requires a friend accept.
- Friends. Friend requests, acceptances, blocks, and removals are stored so both sides see the right status.
- Chats you’re in. Other members see your display name (and photo when shared into that chat), when you’re typing or viewing, and delivery / opened receipts. They see decrypted messages and photos only because their devices hold the keys.
Messages and photos (end-to-end encryption)
New Conté chats use the Messaging Layer Security (MLS) protocol. Your phone encrypts message text and photo bytes before upload. Ciphertext is relayed by a Cloudflare Worker we run for sequencing and delivery. That Worker stores opaque MLS envelopes and related metadata (chat id, sender device, sequence numbers, sizes, timers). It does not receive plaintext message text or photo pixels.
Encrypted photo blobs live in Google Firebase Storage under member-only rules. Profile avatars are stored separately as ordinary JPEGs so any signed-in Conté user can load them.
What we can still see (metadata): who is in a chat, when messages were sent, message type (text / photo / system), timers, read/opened receipts, typing and viewing indicators, and friend-graph status. Metadata is required to deliver the product; it is not sold for advertising.
Push notifications
If you allow notifications, the app stores a device push token (FCM) under your account so we can wake your phone. Push payloads are data-only: chat id, sender id/name, optional group name, message id, and time. They do not include message text or photo bytes. Tokens are readable only by your own account.
Camera, photos, and microphone
With your permission, Conté uses the camera or photo library so you can send pictures. Photos are re-encoded on device before encryption/upload, which strips EXIF (including GPS). Conté does not request your contacts list or advertising ID for ads.
Debug logs (optional)
If you tap Send debug log in Privacy settings, Conté uploads a compressed log of app events (screen names, timings, error codes, version info) to our Cloudflare R2 storage so we can fix bugs. Logs are redacted for emails, tokens, and long secrets before upload. They are not supposed to contain message text, photos, or encryption keys. Uploads require you to be signed in and are rate-limited.
What we do not collect
- No Firebase Analytics / Google Analytics product in the app
- No Firebase Crashlytics (or other crash SDK) in the app today
- No advertising SDK, no ads, no sale of personal information for advertising
- No phone number requirement
- Date of birth is not stored
Firebase App Check (Play Integrity) is present on Android for future abuse protection; enforcement is not turned on yet.
Service providers
- Google Firebase — Authentication, Firestore (account and chat metadata), Cloud Storage (encrypted photo blobs and avatars), Cloud Messaging (push). Google’s processing is described in the Firebase privacy terms.
- Apple — Sign in with Apple; App Store / TestFlight distribution when you install from Apple.
- Google — Google Sign-In; Google Play distribution when you install from Play.
- Cloudflare — MLS delivery Worker, optional in-app update hosting, debug-log storage (R2), and this website.
We don’t sell your personal information. We share data with these providers only to run Conté, or when the law requires it.
Data retention and deletion
Account and chat metadata stay while your account exists. Encrypted message ciphertext and photo blobs remain so other members can sync history, subject to disappearing-message timers you set in a chat. Debug logs we receive are kept only as long as needed to investigate the issue you reported.
To delete your account, email support@contechat.com from the address on the account. We’ll confirm and remove account data we control. Messages already delivered to other people’s devices may remain on those devices. An in-app delete control is planned.
Security
Connections use TLS. Message and photo contents use MLS end-to-end encryption. Access to server projects is limited. No method of transmission or storage is perfectly secure; please protect your device and sign-in.
Children
Conté is not directed at children under 18, and we don’t knowingly create accounts for them. If you believe a minor created an account, contact us and we’ll delete it.
Your choices and region rights
You can update your display name and photo in Settings, leave chats, block or remove friends, turn off notifications in system settings, and refuse to send debug logs. Depending where you live (for example California or the EEA/UK), you may have rights to access, correct, delete, or port personal information, or to object to certain processing. Email us to exercise them. We don’t sell personal information as that term is commonly used in U.S. state privacy laws, and we don’t share it for cross-context behavioral advertising.
International processing
We and our providers may process data in the United States and other countries where those providers operate.
Changes
If this policy changes in a material way, we’ll post the new version here with a new date, and we’ll note it in the app when we can. Keep using Conté after that date means you accept the update.
Contact
Cajun App Factory, LLC
Louisiana, USA
support@contechat.com
PO Box 35, Ville Platte, LA 70586, USA