Privacy Policy

Last updated: September 15, 2026

This is a plain-language summary-style policy for our beta. It is not legal advice; the governing entity is TEASY Messaging OÜ and will publish the final legal registration details and jurisdiction before public launch.

1. About TEASY & this policy

TEASY is a messaging app for iOS and Android, currently in beta. This Privacy Policy explains what information we collect when you use TEASY, how we use it, who we share it with, and the choices you have. It applies to the TEASY apps and the services that power them.

2. Where encryption stands

We want to be straight with you about this.

Your messages are protected in transit using TLS (the same kind of encryption that secures banking websites). End-to-end encryption is still in development and is not yet enabled. That means, for now, your messages are processed on our servers so we can deliver them to you and to your other devices. We are working toward end-to-end encryption and will update this policy and tell you clearly when it is available.

3. Information we collect

Phone number — to create your account. We send a one-time code by SMS through a third-party SMS provider to confirm it is really you.
Profile information — your display name and an optional avatar.
Your messages & media — the messages, photos, and files you send, stored so we can deliver them across your devices.
Your chats and contact list in TEASY — the conversations you create and the TEASY accounts you add as contacts, with the display names you give them.
Phone numbers you submit for friend discovery — only if you use the optional “Find friends” feature. See section 4 for exactly what is sent and what is kept.
Push-notification tokens — so we can send notifications to your device.
Basic technical & log data — such as your IP address, app and device version, and timestamps, used for security and reliability.

4. Your device's contacts (address book)

TEASY has one optional feature, “Find friends”, that uses your address book to show you which of the people you already know are on TEASY. It runs only when you open that screen yourself — never at launch, never in the background.

What leaves your device: phone numbers only, in normalised international form, sent over TLS in batches.
What never leaves your device: contact names, surnames, company names, email addresses, photos, notes and every other field of your address book.

Our server hashes each number it receives (HMAC-SHA256 with a secret salt) and compares it against the hashes of registered accounts, then returns only the numbers that belong to existing TEASY users. Numbers submitted for this lookup are used for the lookup itself and are not written to our storage; numbers with no match are discarded immediately. A person is stored in your contact list only when you explicitly add them, and in that case we keep an account identifier and the display name you chose — not your address book entry.

We are working toward a private-set-intersection scheme so that the server never sees a raw number at all. Until that ships, the description above is exactly what happens, and we will update this section when it changes.

This permission is entirely optional and TEASY works without it — you can start a conversation by entering a phone number manually. You can grant or revoke contacts access at any time in your device settings (on iOS: Settings → TEASY → Contacts). We never use contact data for advertising, tracking, profiling or marketing, never sell it, and never share it with third parties.

5. How we use your information

Provide and deliver messaging, voice and video calls, and notifications.
Keep the service secure and prevent abuse, spam, and fraud.
Troubleshoot problems and improve how TEASY works.

6. Voice & video calls

Calls use WebRTC and connect directly between devices whenever possible. When a direct connection cannot be made, a signaling and TURN server helps establish and relay the connection so your call goes through.

7. How we share information

We do not sell your personal data, and we do not show third-party ads. We share information only with the service providers we need to run TEASY, and when the law requires it:

SMS delivery — Twilio, to send your one-time verification code. Twilio receives only the destination phone number and the text of that code.
Push notifications — Apple (APNs) and Google (FCM), to deliver notifications to your device.
Hosting, CDN, DNS & security — cloud providers and Cloudflare.
Legal reasons — when required by law, or to protect the safety of people or the service.

8. Data retention & deletion

You can delete your account and profile from within the app, in Settings → Account & phone → Delete my account…. Doing so removes your profile and associated data, subject to standard short-term backup and operational retention. Copies of messages are removed on our normal server cycles. If you cannot access the app, write to us and we will delete the account for you after verifying that it is yours — see Support.

9. Security

We protect data in transit with TLS, use access controls, and are actively working toward end-to-end encryption. That said, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Children

TEASY is not directed to children under 13, or the higher minimum age required in your country. If you believe a child has provided us with information, please contact us and we will take appropriate steps.

11. International transfers

Our service providers operate in different countries, so your information may be processed in countries other than where you live. We rely on these providers to help run TEASY wherever they are located.

12. Changes to this policy

We may update this policy from time to time. When we do, we will post the revised version here and update the "Last updated" date at the top of this page.

13. Contact us

Questions about privacy? Email us at support@t-easy.online, or visit our Support page.

Governing entity and mailing address: TEASY Messaging OÜ, legal entity details to be published in the final launch package.