Privacy policy.
Not marketing — just the plain truth. What we take, what we don't, why we keep some things, why we keep none of the rest.
Last updated: 2026-05-16
Summary (the long version is below)
Zerolog runs on the principle "collect less, do the right thing." Your message content never reaches our server and is never stored persistently anywhere. Your phone number is used only at the verification moment. We collect no advertising ID, location, contacts, or analytics. Blocking, reporting, and account deletion are entirely in your control. Each topic is explained in detail below.
What we don't collect
Zerolog does not collect: email, date of birth, location (GPS), address book / contacts, calendar, advertising IDs (IDFA / AAID), analytics / usage events, crash reports, web browsing history. No third-party advertising or tracking SDK is loaded. We do not collect any data category not listed on this page.
Phone number — only for verification
On first launch you enter your phone number and receive a 6-digit SMS code. This step is required to prevent fake accounts and abuse (responsibility). After successful verification your number is not stored long-term; it isn't shown on your profile and isn't shared with other users. Only a single verification reference (hash), used to prevent re-registration and abuse, remains in our records — which can be deleted on lawful request.
Username and profile
You pick a unique username (@username) and a display name. Your username is passed through a profanity filter and can be changed at most 5 times a month; the server only verifies your username's uniqueness for matching. Your avatar is auto-generated from a seed or is a photo you pick from the gallery, and is kept on your device.
What lives on the device
Local identity (UUID, username, display name, avatar seed) lives in OS secure storage (iOS Keychain / Android secure storage). Active sessions and chat messages live in RAM only — never written to disk, database, or cloud. When the app closes the memory is wiped.
Permissions and the reason for each
Bluetooth: nearby pairing and data transport. Local network: mDNS / nearby discovery. Notifications: inbound pair requests and call notifications. Camera (optional): only when scanning a pairing QR. Microphone (optional): only during a voice call. Location, calendar, and contacts (address book) are never requested.
Message content and media
Message and media content is never stored on any of our servers. At close range, devices speak directly over Bluetooth or local network. For communication over the internet, content is end-to-end encrypted; the server only relays encrypted packets and cannot see the content. Sent content also lives only in RAM on the receiving device and is wiped when the lifetime you chose runs out.
Wipe on app close
When the app is fully closed, every in-memory message is wiped, every active session is closed, every timer is cancelled. On relaunch no prior chat resumes — because nothing was saved.
Voice calls
In voice calls, audio flows directly between the two devices and is end-to-end encrypted. Call content is not recorded or stored. The signaling needed to set up the call rides the encrypted channel; no recording is left behind to listen to.
Blocking
You can block any user in one tap. When you block someone, they can no longer send you messages or pair requests, and the conversation with that person is automatically wiped from both devices. You can see whom you've blocked in the app (Settings → Privacy → Blocked) and unblock at any time.
Reporting and content moderation
You can report a user or a conversation with these categories: Spam, Harassment, Abuse/Violence, Fake Account/Scam, Other. You can add an optional note and track your report's status (Open, Reviewing, Actioned, Dismissed) inside the app. Important: because Zerolog is end-to-end encrypted and peer-to-peer, we cannot automatically scan or read message content; moderation therefore works through the reports you submit and the context you provide. Records kept for reports (non-personal abuse signals and timestamps) are retained for a reasonable period for safety.
Screenshots and user responsibility
The app detects screenshot/recording attempts on the chat screen, warns you, and blocks them on platforms where possible; however, the other person's device is not under your control. No messaging app can fully prevent the other party from taking a screenshot. The responsibility to choose whom you talk to lies with you.
Data retention periods
Messages and media: not stored (only in RAM for the chosen lifetime). Phone verification reference: deleted within 24 hours when the account is deleted. Push notification device tokens: removed when the account is deleted. Abuse/report signals: limited period for safety. Corresponding records in backups: purged within the 30-day rollback window.
Your rights (KVKK & GDPR)
Under KVKK Article 11 and the GDPR, you have the right to access, rectify, request erasure of (right to be forgotten), object to processing of, and port your data. You can exercise most of these instantly from inside the app (e.g. account deletion). For requests, write to info@zerolog.tech; we will resolve your request within 30 days at the latest.
International data transfers
Because message content is not transferred, the content transfers typical of other messengers do not apply. Infrastructure providers used for minimal services such as verification and notifications may be located in different countries; in that case, transfers are made with safeguards compliant with applicable law (e.g. standard contractual clauses).
Legal requests and law enforcement
The data that can be requested from us is extremely limited by design: because we don't store message content, we cannot hand it over. Within the applicable legal framework, and only with a valid and authorized request, a limited response may be provided based on the minimal records we hold (e.g. a verification reference).
Children
Zerolog is not designed for children under 13 and we do not knowingly collect data from anyone under 13. Phone verification means registration usually happens on a line under adult supervision. If you discover your child is using the app, you can delete the app, delete the account from inside the app, or write to info@zerolog.tech. See our Children's Privacy page for details.
Changes to this policy
We may update this policy from time to time; for significant changes we update the "last updated" date on this page and notify you in-app where appropriate. We promise not to quietly make a change that rolls back privacy.
Contact
For any privacy question, request, or application, write to info@zerolog.tech.