Privacy Policy

Last updated: August 2026

Lepus is a messaging application. This policy describes what data we collect, how we use it, and your rights.

Data We Collect

• Account information: username and password (hashed).
• Profile data: display name, avatar photo, bio, emoji status.
• Messages: text, photos, videos, voice messages, files, stickers, and GIFs you send.
• Device information: device model, operating system, and app version, collected during login.
• IP address: recorded with each session for security purposes.
• Push notification tokens: APNs or FCM tokens used to deliver notifications to your device.
• Location: only when you explicitly share your location in a chat. We do not track your location in the background.

How We Use Your Data

• To deliver messages and calls between users.
• To send push notifications about new messages and calls.
• To display your profile to other users.
• To enforce blocks and content moderation.

Data Sharing

We do not sell, rent, or share your personal data with third parties. Data may be disclosed only if required by law.

Data Retention

Your data is stored on our servers until you delete your account. Messages in group chats remain visible to other members after your account is deleted, but are no longer associated with your identity.

Account Deletion

You can delete your account at any time from the app settings. Deletion removes your profile, avatar, private messages, sessions, and push tokens. This action is irreversible.

Cookies

Lepus does not use cookies. Authentication is token-based.

Security

Connections are encrypted via TLS. Passwords are hashed using PBKDF2-SHA256. We take reasonable measures to protect your data, but no system is completely secure.

Children

Lepus is not intended for children under 13. We do not knowingly collect data from children under 13.

Changes

We may update this policy. Continued use of the app after changes constitutes acceptance.

Contact

Questions or requests: [email protected]