Effective 11 September 2026
This policy describes what ProxChat collects, why, and what you can do about it. It describes how the app actually works, including the parts that limit what we can see.
The controller of your personal data is Machariel OÜ, registered in Estonia under registry code 17573220, registered address Sepapaja tn 6, Tallinn 15551, Estonia. You can reach us at info@machariel.ee.
Because we are established in the European Union, the General Data Protection Regulation applies to everyone who uses ProxChat, wherever they live. If you are in Saudi Arabia or Jordan, your national data protection law applies in addition.
| Data | Why | Legal basis |
|---|---|---|
| Phone number | To verify you are a real person and to sign you in. It is never shown to other users and is never used for marketing. | Performance of a contract |
| Display name, photo, bio, gender | Your profile, which other users see. You choose all of it and can change or clear it at any time. | Performance of a contract |
| Approximate location and city | To show you people nearby, and to place you in other people's lists. See below — we do not store your exact position. | Consent |
| Messages | To deliver your conversations. Stored so that a message sent while the other person is offline still arrives. | Performance of a contract |
| Blocks and reports | To keep the blocks you set working, and to review reported behaviour. | Legitimate interests in user safety |
| Device push token | To notify you of a new message. Only if you allow notifications. | Consent |
| Age confirmation and acceptance of these terms, each with the time given | To show that you confirmed you are 18 or older and agreed to our terms. | Legal obligation and legitimate interests |
We do not use analytics or advertising software. ProxChat contains no advertising identifiers, no third-party trackers, no behavioural profiling, and we never upload your contacts.
Location is the most sensitive thing this app handles, so here is exactly what happens.
Messages are stored on our servers so they can be delivered when you are offline. They are not end-to-end encrypted, which means we are technically able to read them. We access message content only when investigating a report, responding to a lawful request, or automatically screening for prohibited content. Please do not treat ProxChat as a secure channel for confidential information.
Your profile and messages are free text. If you choose to write something that reveals your health, religion, political opinions, sexual orientation, or similar, you are asking us to process that information by publishing it yourself, and you can remove it at any time. We recommend you do not put such information in a public profile.
We do not sell your data and we do not share it with advertisers. We use a small number of service providers, each under a contract that limits them to acting on our instructions.
| Provider | What for | Where |
|---|---|---|
| Hetzner Online GmbH | Servers and encrypted backups | Germany / Finland (EU) |
| Twilio Inc. | Sending your one-time sign-in code | United States, under EU standard contractual clauses |
| Apple and Google | Delivering push notifications to your device | United States, unavoidable for mobile notifications |
| Mistral AI | Automatic screening of messages, bios and profile photos for prohibited content | France (EU) |
Everything else — your profile, your location, your messages — is stored on servers in the European Union and is not transferred outside it.
| Data | Kept for |
|---|---|
| Approximate location | 30 days after the last update, then deleted automatically |
| Profile, messages, blocks | Until you delete your account |
| Reports and moderation records | 180 days after the case is closed |
| Encrypted backups | 14 days, then deleted automatically |
Under the GDPR you can:
One honest caveat about deletion. Deleting your account removes your data from the live service at once. Encrypted backups taken before you left still contain it until they expire, which is at most 14 days. We do not restore deleted accounts from those backups. Separately, if an account is deleted while the app is offline mid-operation, an orphaned profile photo can briefly remain in storage; a nightly job removes any such file, so the maximum exposure is one day.
You can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or to the authority where you live.
ProxChat is for adults only. You must be 18 or older, and you confirm this when you create a profile. If we learn that an account belongs to someone under 18 we delete it. If you believe a minor is using ProxChat, write to info@machariel.ee and we will act quickly.
Traffic between your phone and our servers is encrypted in transit. Our database enforces per-user access rules so that one account cannot read another's private data, and backups are encrypted before they leave the server. No system is perfect; if a breach affects your rights we will notify the Estonian supervisory authority within 72 hours and tell you where the law requires it.
If we change this policy we will update the date at the top, and for anything significant we will tell you in the app before the change takes effect.