Katt

Katt ("Katt," "we," "us," or "our") operates the Katt mobile messaging application (the "App"). This Privacy Policy explains what information we collect when you use Katt, how we use it, and the choices you have. By using Katt, you agree to the collection and use of information as described here.

1. Information we collect

• Account information — your email address, username, display name, and (optionally) a profile photo, when you register with email/password, Google Sign-In, or Sign in with Apple.
• Messages, photos, videos & voice messages — these are end-to-end encrypted on your device before they leave it, in one-to-one and group chats alike. They pass through and are stored on our servers (Google Firebase / Google Cloud Platform) as ciphertext only, so we can deliver them to the intended recipient(s) and keep your chat history available on your devices. We cannot read this content, and neither can our infrastructure provider.
• Content that is not end-to-end encrypted — file and document attachments (including the file name), one-time location pins, profile photos and group photos are stored on our servers without end-to-end encryption. They are still protected in transit by TLS, encrypted at rest by our cloud provider, and restricted to the relevant chat's participants by server-side rules — but we are technically able to access them. Section 5 explains the boundary in full.
• Encryption keys — your device generates an encryption key pair on first launch. The public part is stored on our servers so other people can send you encrypted messages; the private part never leaves your device's secure hardware keystore (iOS/macOS Keychain, Android Keystore) and is never sent to us. If you set up a recovery phrase, we store a copy of your private key that is itself encrypted with a key derived from that phrase — the phrase is never sent to us, so without it that copy is unreadable to us.
• Link previews — if a message contains a link and you have previews enabled, the link's address is sent to our servers in unencrypted form, separately from your message, so a preview can be fetched. The rest of the message text stays encrypted.
• Camera & microphone — accessed only while you're actively making a voice/video call, or capturing photo, video, or voice-message content to send. We don't access these otherwise.
• Photo library — accessed only when you choose to pick an image, for example to send in a chat, set a chat background, or set your profile photo.
• Location — accessed only when you tap to share your location in a chat. It's a single, one-time snapshot of your location at that moment; Katt does not track your location in the background or continuously.
• Device & push notification data — a device push token (Apple Push Notification service / Firebase Cloud Messaging) so we can deliver notifications for new messages and incoming calls, plus basic technical data (device type, OS version, app version, and crash/error logs) needed to keep the App working.
• Calling data — voice and video calls connect using WebRTC, either directly between devices or, when needed, relayed through a TURN server operated by a third-party network provider so the call can connect. Call media is encrypted end-to-end by WebRTC (DTLS-SRTP): the relay only carries encrypted call traffic between participants and cannot listen in. We don't record or store the content of your calls.
• Astrology assistant — if you use it, you give us your birth date, birth time (if you know it) and birth place, and the questions you ask. We turn the place name into coordinates with a third-party geocoding service and send your questions together with the chart data we calculate to a third-party AI provider to write each answer. We store your profile, charts, conversation history and a short summary of what you have told it, encrypted at rest with per-user keys managed in Google Cloud KMS. This data is not end-to-end encrypted: we are technically able to access it, and the AI provider processes it while it writes an answer.
• AI photo editor — the photo you choose and the instruction you write are sent to a third-party AI provider to produce the edited picture. We store the original reference and the result on our servers (not end-to-end encrypted) so they appear in your gallery.
• Songs — the lyrics, style and settings you enter are sent to a third-party music-generation provider to create the song. If you create a personal voice, the voice recordings you provide are sent to the same provider. We store the generated tracks, stems and your voice list on our servers (not end-to-end encrypted).
• Purchases and tokens — subscriptions and token packs are bought through the Apple App Store or Google Play, which handle your payment; we never receive your card details. We use RevenueCat to receive purchase events, identified by your Katt account ID. We store your token balance, current plan and a record of purchases and token use.
• Usage analytics — we use Google Analytics for Firebase to learn which features are used. It records events such as opening a tab, sending a message, placing a call or creating a song, together with an account identifier generated by Katt (never your email or name) and basic device and app information. It does not receive the content of your messages or AI requests.
• Device verification — to keep the service from being abused we use Firebase App Check (Apple App Attest / DeviceCheck on iPhone, Google Play Integrity on Android), which checks that requests come from a genuine copy of Katt. On iPhone, Apple DeviceCheck is also used to remember, in one flag stored by Apple, that a device has already received the one-time welcome tokens.

2. What we don't collect

We don't use third-party advertising networks, we don't use your content for advertising, and we don't sell or rent your personal information to anyone. Our analytics (Section 1) are used to understand and improve the App, not for advertising.

3. How we use your information

• To create and manage your account and authenticate you.
• To deliver messages, media, and calls between you and the people you chat with.
• To send you notifications about messages, calls, and account activity. Because message content is encrypted, our servers cannot include it in a notification — a new-message notification says only who it is from.
• To provide the astrology, photo-editing and song features you ask for, and to charge the tokens they cost.
• To process purchases, keep your token balance and handle refunds.
• To maintain, secure, and improve the App, to understand which features are used, and to diagnose problems.
• To enforce our Terms of Service, prevent abuse and fraud, and keep the App safe.

4. How we share information

We share information only as needed to operate Katt:

• With other users you chat with — the content of messages, calls, and shared media is, by definition, visible to the people you send it to. They are the only people who can decrypt it.
• With service providers who process data on our behalf: Google Firebase / Google Cloud Platform (authentication, database, file storage, push notifications, serverless functions, key management, analytics, device verification), a third-party network provider (call relay / network traversal only), Apple / Google (sign-in, payments, device verification), RevenueCat (purchase management), and third-party AI, music-generation and geocoding providers (answers of the astrology assistant, AI photo edits, songs and voices, and turning a birth place into coordinates). These providers only receive what they need to do their job. The data you send to the AI and music providers is processed under their own terms and privacy policies, and may be processed in other countries.
• For legal reasons — if required by law or in response to valid legal process.

We don't otherwise share your personal information with third parties.

5. Data security

Katt is end-to-end encrypted, always. There is no setting to turn it on or off, and no chat that is left unprotected. Message text, photos, videos, files and voice messages are encrypted on the sending device and decrypted only on the devices of the people in that chat. We cannot read them, and neither can our cloud infrastructure provider.

The scheme uses standard, published algorithms — X25519 key agreement, HKDF-SHA256 key derivation, and AES-256-GCM authenticated encryption — through a well-established open-source cryptography library. Nothing about it is hand-rolled. Each file you send is encrypted with its own key, which is itself encrypted for the chat. Voice and video calls are encrypted end-to-end by WebRTC (DTLS-SRTP).

Your private key is generated on your device and stored in the operating system's secure keystore (iOS/macOS Keychain, Android Keystore). It is never transmitted to us. A recovery phrase, if you set one up, is the only way to move your message history to a new device — we do not have it and cannot reset it, so if you lose both your device and your phrase, your encrypted history cannot be recovered by anyone, including us.

In addition, everything is transmitted over TLS, stored at rest with our cloud provider's own encryption, and access to a conversation's documents is restricted by server-side security rules to that conversation's participants.

Verifying who you're talking to. Encryption proves that nobody in the middle can read a chat; it does not by itself prove who is at the other end. Each one-to-one chat therefore has a 60-digit security code, derived from both people's public keys, that you and your contact can compare out of band — read it aloud on a call and it should match on both phones. If a contact's key changes (usually a reinstall or a new phone), Katt shows you a notice in that chat rather than switching silently.

What encryption does not cover. End-to-end encryption protects the content of your messages, photos, videos and voice messages — not the fact that you sent them, and not everything else in the app. The following are accessible to us as the operator of the service: your account details (email, username, display name, profile photo), group names and group photos, who you exchange messages with and when, delivery and read status, reactions, file and document attachments and their file names, one-time location pins, the addresses of links you send if previews are enabled, the data you give to the astrology assistant, AI photo editor and song features and the results they produce, your token and purchase records, and the technical and analytics data listed in Section 1. The end-to-end encryption described here applies to your chats and calls; the AI features cannot work on content that nobody but you can read, so what you send to them is processed as described in Section 1.

No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

6. Data retention & your choices

We retain your account information and message history for as long as your account is active, so your chat history stays available across your devices. You can:

• Delete your account at any time directly in the App (Settings → Delete Account). This removes your account and the content only you control: your profile, contacts, encryption-key backup, photos, astrology data, songs and voices, photo-editor works, and your token balance. It does not cancel a subscription — cancel that in your Apple or Google account settings. Purchase records may be kept as long as accounting or legal obligations require.
• Request deletion of your data, ask questions, or exercise applicable privacy rights (such as access, correction, or deletion under laws like the GDPR or CCPA, where they apply to you) by emailing hello@katmessenger.com.

Messages you've sent may remain visible to the other participant(s) of a conversation after you delete your account — similar to how a text message stays on the recipient's phone.

7. Children's privacy

Katt is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, contact us at hello@katmessenger.com so we can delete it.

8. International users

Katt's servers are operated by our cloud infrastructure provider and may store and process information in countries other than your own. By using Katt, you consent to this transfer, storage, and processing.

9. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the effective date above and, where appropriate, notify you in the App. Continued use of Katt after a change means you accept the updated policy.

10. Contact us

Questions about this policy? Email hello@katmessenger.com.

Welcome to Katt. These Terms of Service ("Terms") govern your access to and use of the Katt mobile application (the "App," "Service"). By creating an account or using Katt, you agree to these Terms. If you don't agree, please don't use the App.

1. Eligibility

You must be at least 13 years old to use Katt. If you're under the age of majority in your jurisdiction, you confirm you have permission from a parent or guardian to use the App.

2. Your account

You're responsible for keeping your account credentials confidential and for all activity under your account. Let us know right away at hello@katmessenger.com if you suspect unauthorized use of your account.

3. Acceptable use

When using Katt, you agree not to:

• send unlawful, harassing, threatening, abusive, hateful, or defamatory content;
• send spam, phishing links, or malware;
• impersonate another person or misrepresent your affiliation with anyone;
• attempt to gain unauthorized access to other accounts, or to our systems or infrastructure;
• use the App for any illegal purpose, or to exploit or harm minors in any way;
• interfere with or disrupt the App's functioning, including reverse engineering, scraping, or injecting malicious code.

Because Katt is end-to-end encrypted, we cannot read the content of your messages, and we do not monitor conversations. We act on reports and on information available to us at the account level, and we may remove content we can access (such as a profile name or photo), or suspend or terminate accounts, that violate these Terms.

4. Your content

You retain ownership of the messages, photos, videos, and other content you send through Katt ("Your Content"). By sending Your Content through the App, you grant us a limited license to store and transmit it solely as necessary to operate the Service — for example, delivering your message to its recipient. In practice this content reaches us already encrypted, and we handle it without being able to read it. You're solely responsible for Your Content and for having the rights to share it.

5. Calling feature

Katt's voice and video calling is intended for casual, everyday conversations between users. It is not a replacement for traditional telephone service and cannot be used to contact emergency services (such as 911 or your local equivalent). Do not rely on Katt for emergency communications.

6. AI features and generated content

Katt's astrology assistant, AI photo editor and song features are produced with the help of third-party AI and music-generation services. Their output can be wrong, incomplete or unexpected. The astrology assistant is for reflection and entertainment: it is not medical, legal, financial or other professional advice, anything it says about the future is a probability and not a promise, and you should not make important decisions on that basis alone. If you are in crisis or need urgent help, contact local emergency or support services.

You are responsible for what you submit (photos, lyrics, recordings, questions) and must have the right to use it. Only upload your own voice to create a personal voice. We do not guarantee that generated pictures or songs are free of third-party rights, and you are responsible for how you use them. Do not use these features to create unlawful, hateful or harassing content, or to imitate a real person without their consent.

7. Tokens, subscriptions and refunds

Katt's AI features use tokens. The cost of each action is shown in the App. Tokens come from a subscription plan or from token packs, and as a one-time welcome gift for new accounts (once per account and device). Tokens have no cash value, cannot be transferred or exchanged, and are charged when an action delivers its result; an action that fails is not charged.

• Subscriptions are billed through the Apple App Store or Google Play and renew automatically each period until you cancel in your store account settings. Tokens from a subscription are added for each period and expire when the period ends or the plan renews; unused subscription tokens do not carry over.
• Token packs are one-time purchases. Tokens from a pack do not expire.
• Payment and refunds. Payment, billing and refund requests are handled by Apple or Google under their own terms, and they decide whether a refund is granted. If a purchase is refunded, we remove the tokens that came with it. Tokens from that purchase that you have already used are recorded as a balance owed: it is repaid from tokens you buy or receive next (a new purchase or renewal first covers it), and paid features are unavailable until it is repaid.
• We may refuse or suspend paid features where we detect abuse, such as repeated purchases that are refunded after use.
• Prices, plan sizes and token costs may change; changes do not affect tokens you already hold.

8. Third-party services

Katt relies on third-party infrastructure — including cloud hosting, network relay, sign-in, push-notification, payment, analytics, AI and music-generation providers — to operate. We aren't responsible for outages or issues caused by these third parties that are outside our control.

9. Termination

You may stop using Katt and delete your account at any time via Settings → Delete Account in the App. We may suspend or terminate your access if you violate these Terms, or if we discontinue the Service, with notice where reasonably possible.

10. Disclaimers

Katt is provided "as is" and "as available," without warranties of any kind, express or implied. We don't guarantee the App will be uninterrupted, error-free, or completely secure.

11. Limitation of liability

To the maximum extent permitted by law, Katt and its developer will not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of, or inability to use, the App.

12. Changes to the App or these Terms

We may modify or discontinue the App, or update these Terms, at any time. If we make material changes to these Terms, we'll update the effective date above. Continuing to use Katt after changes take effect means you accept the revised Terms.

13. Governing law

These Terms are governed by the laws applicable in the developer's place of business, without regard to conflict-of-law principles, except where local consumer-protection law requires otherwise.

14. Contact us

Questions about these Terms? Email hello@katmessenger.com.