Privacy Policy

Effective date: 2026-01-19 | Last updated: 2026-01-19

VLiao Chat ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App").

1. Information We Collect

1.1 Account Information

• Matrix user ID (username) and authentication credentials
• Phone number (for registration and account recovery)
• Profile information you provide (display name, avatar image)

1.2 Communications Data

• Text messages you send and receive
• Media content (photos, videos, voice messages) you share
• Message metadata (timestamps, read receipts, delivery status)
• Group chat information (group names, member lists)

1.3 Device Information

• Device type and model
• Operating system and version
• App version
• Device language settings
• Network connection type (WiFi/cellular)

1.4 Media and Files

• Photos and videos you choose to share (accessed only when you select them)
• Voice recordings you create for voice messages
• QR codes you scan (processed locally on device)

2. Device Permissions

Our App requests the following permissions, which you can manage in your device settings:

Permission	Purpose	When Used
Camera	Take photos and videos to share in chats; scan QR codes	Only when you tap the camera button or scan feature
Microphone	Record voice messages; record videos with audio	Only when you hold the voice message button or record video
Photo Library (Read)	Select existing photos and videos to share	Only when you choose to pick media from your library
Photo Library (Write)	Save received media to your device	Only when you choose to save an image or video
Notifications	Receive message notifications when app is in background	When new messages arrive

3. Third-Party Services and SDKs

Our App uses the following third-party services and software development kits (SDKs):

3.1 Matrix Protocol (matrix.org)

• Purpose: Core messaging infrastructure for sending and receiving messages
• Data processed: User ID, messages, media files, contact lists
• Data location: Matrix homeserver (may be located outside your country)
• Privacy Policy: https://matrix.org/legal/privacy-notice

3.2 Google ML Kit (Barcode Scanning)

• Purpose: QR code scanning for adding friends and joining groups
• Data processed: Camera images (processed locally on device)
• Data transmission: None - all processing happens on your device
• Privacy Policy: https://developers.google.com/ml-kit/terms

3.3 SDWebImage

• Purpose: Efficient image loading and caching
• Data processed: Image URLs and cached images
• Data location: Local device storage only

3.4 SQLite / Drift Database

• Purpose: Local storage of messages and app data for offline access
• Data processed: Messages, contacts, settings
• Data location: Local device storage only - not transmitted to any server

3.5 Flutter Secure Storage

• Purpose: Secure storage of login credentials
• Data processed: Authentication tokens
• Data location: iOS Keychain (encrypted, local only)

4. How We Use Your Information

• Provide messaging service: Deliver your messages to intended recipients
• Account management: Create and maintain your account, authenticate your identity
• Feature functionality: Enable features like voice messages, photo sharing, group chats
• Service improvement: Fix bugs and improve app performance
• Customer support: Respond to your inquiries and support requests
• Legal compliance: Comply with applicable laws and regulations

5. Data Storage and Security

5.1 Local Storage

• Messages and media are cached locally on your device for offline access
• Login credentials are stored in iOS Keychain (encrypted)
• Local data is deleted when you uninstall the App or delete your account

5.2 Server Storage

• Messages are transmitted through and stored on Matrix homeservers
• Server data retention follows the Matrix homeserver operator's policies

5.3 Security Measures

• All network communications use HTTPS/TLS encryption
• Credentials are stored using platform-native secure storage
• We implement industry-standard security practices

6. Data Retention

Data Type	Retention Period
Account information	Until you delete your account
Messages (local)	Until you delete them or uninstall the App
Messages (server)	Per Matrix homeserver policy
Media cache	Automatically cleared periodically or when you clear cache

7. Data Sharing

We do NOT sell your personal information.

We may share limited data with:

• Matrix homeserver operators: For message delivery (necessary for the service to function)
• Other users: Your profile information and messages are shared with people you communicate with
• Law enforcement: Only when legally required by valid legal process

8. International Data Transfers

Your data may be processed and stored on Matrix homeservers located outside your country of residence. By using VLiao Chat, you consent to the transfer of your information to countries that may have different data protection laws than your country.

9. Your Rights

You have the right to:

• Access: View your personal data stored in the App
• Correction: Update your profile information at any time
• Deletion: Delete your account and associated data
• Data portability: Export your data (contact us for assistance)
• Withdraw consent: Revoke permissions in device settings

How to Delete Your Account

1. Open VLiao Chat
2. Go to Settings → Account Settings → Delete Account
3. Enter your password to confirm
4. Your account and data will be permanently deleted

Alternatively, email us at privacy@vliaochat.com with subject "Account Deletion Request". We will process your request within 30 days.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know: What personal information we collect, use, and share
• Right to delete: Request deletion of your personal information
• Right to opt-out: We do not sell personal information, so no opt-out is necessary
• Right to non-discrimination: We will not discriminate against you for exercising your rights

See our "Do Not Sell My Personal Information" page for more details.

11. Children's Privacy

VLiao Chat is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at privacy@vliaochat.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes:

• We will update the "Last updated" date at the top of this policy
• We may notify you through the App or via email
• Your continued use of the App after changes constitutes acceptance