Draft: this text is waiting for a final check before it is relied on.

Privacy policy

Last updated 22 October 2026

This explains what Transmit keeps about you, why, how long, who else handles it, and what you can do. We have written it to be understood by anyone aged 13 or over. [[TO CONFIRM: LLC name and registered address]] is the controller of your data. Contact: help@transmit.chat.

What we keep and why

What	Why	Basis
Your email, name and profile picture from Google, and the username you choose	To sign you in and show who you are to your friends	Needed to provide the service
Your date of birth (we keep that you are 13 or over, and the date to work out when a block lasts if you are younger)	To keep under-13s off the service	Legal duty and protecting children
Messages, files, reactions and voice-channel presence	To deliver them to the people you send them to	Needed to provide the service
Friends, servers you belong to, settings and drafts	To make the app work the way you set it	Needed to provide the service
Your sign-in session, including the network address of your device	To keep you signed in securely and spot misuse	Legitimate interests (security)
Notification tokens for devices you allow	To send notifications you have switched on	Your consent
Reports and what we decided	To keep the service safe and to explain our decisions	Legitimate interests; legal duties

We do not use your data for adverts, we do not sell it, and we do not track you across other websites. We do not read private conversations unless someone in them reports a message.

How long we keep it

Your account and messages: until you delete your account, or it is deleted after a year of not being used (we email you twice first).
When you delete your account: it is hidden for a waiting period (14 days by default) in case you change your mind, then your profile, files, notification tokens and sign-ins are erased. Your messages are removed, or kept without your name as "Deleted user", as you chose.
Sign-in sessions: up to 30 days. Drafts: 30 days. Our security log: 90 days.
Reports: kept for up to a year after they are closed. [[TO CONFIRM: retention for reports about illegal content, and when we must keep them for the authorities.]]
A record that an account was erased: we keep a scrambled (hashed) version of the email address and counts of what was removed, so that we can show a deletion happened if you ask, and so a restored backup does not bring you back. It cannot be turned back into your email address.
Backups: [[TO CONFIRM: how long backups are kept; erased accounts are removed again if a backup is ever restored.]]

Who else handles your data

We use these services to run Transmit. Each only gets what it needs.

OVH: the servers that run Transmit. Voice and video travel directly between your device and these servers, not through anyone else.
Cloudflare: sits in front of the website, the app and live connections (WebSockets) for network, security and DNS.
MongoDB Atlas: the database.
Backblaze B2: stored files and backups.
Google: sign-in, and checking links in messages against Safe Browsing.
Firebase Cloud Messaging (Google): delivering notifications.
Resend: sending the account emails we send you (such as deletion and safety notices). We send no marketing.

[[TO CONFIRM: where each of these stores data and the legal safeguards used for transfers outside the UK and EU.]]

Cookies

We use one cookie to keep you signed in. We do not use advertising or analytics cookies, and this website sets none.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or move it elsewhere. Most of this you can do yourself in your account settings: download your data, edit your profile, or delete your account. For anything else write to help@transmit.chat and we will reply within a month.

If you are not happy with how we handled your data you can complain to the Information Commissioner's Office (ico.org.uk), or to your local data protection authority.

Young people

You must be 13 or older. A parent or guardian can ask us to delete a young person's account by writing to us. We check the request is genuine before we act, and the account is suspended for a week before it is erased so a mistake can be undone.

Changes

If we change this policy in a way that matters we will tell you in the app first.