This Privacy Policy explains what information Ironclad Chat ("Ironclad", "we", "us") collects, how we use it, who we share it with, and the choices you have. It applies to the Ironclad Chat mobile apps for iOS and Android, the Ironclad Chat web app, and this website (ironclad.chat). Ironclad Chat is a product of Ledger Logic.
The short version
- Your messages, files, photos and profile picture are end-to-end encrypted on your device. We store them only in encrypted form and cannot read them.
- Calls are encrypted in transit and are never recorded or stored.
- We do not show ads, do not use advertising or analytics trackers, and do not sell or rent your personal information.
- We do not access your location or your contacts.
- You can ask us to delete your account and its data at any time.
1. Information we collect
Account information. To create your account we collect your name, username and email address. These come from you, from your access request, or from your organization's administrator. Your password is handled by our sign-in service and stored only as a secure one-way hash. If you turn on two-step verification, we store what is needed to check your codes. If you create a backup passphrase for your encryption keys, we store an encrypted copy of it so you can restore your messages on a new device.
Messages, files and media. The content of your messages, attachments, voice and photo messages, and your profile picture is encrypted on your device before it is sent. Our servers store and relay this content only in encrypted form, and we do not have the keys to decrypt it.
Information needed to deliver the service. To route messages and keep conversations working, our servers process limited metadata. This includes account identifiers (stored as one-way hashes), the conversations you belong to, message timestamps, the size of encrypted items, delivery status, and your public encryption keys.
Calls. Voice and video calls are carried in real time by our call servers and are encrypted in transit. We do not record calls or store their audio or video.
Device and technical information. If you allow notifications, we store a notification token for your device so we can alert you about new messages and calls. Our servers also keep short-lived technical logs for security, abuse prevention and troubleshooting. These logs contain your IP address, connection times and your device type.
Support requests. When you contact support from the app or the sign-in screen, we collect what you write, the category you choose, and your name and email address so we can reply.
Access requests on this website. When you request access, we collect your name, email address, company and message. To protect the form from automated abuse, this website and the app's sign-in help form use Google reCAPTCHA, which processes information about your browser and interaction under Google's Privacy Policy.
Device permissions. The app asks for permission only when you use a feature that needs it. It uses the camera and microphone for calls and for photos or recordings you choose to send, and it reads only the photos and files you pick. Face ID, Touch ID and fingerprint unlock are handled entirely by your device's operating system. We never receive your biometric data. You can change these permissions at any time in your device settings.
What we do not collect. We do not collect your precise or approximate location, your address book, advertising identifiers or your browsing history, and the app contains no third-party analytics or advertising SDKs.
2. How we use information
- To provide the service: create and secure your account, deliver encrypted messages, files and calls, and sync your conversations across your devices.
- To send notifications about new messages, calls and invitations. Notifications show the sender's display name, never the message content.
- To send service emails, such as account setup, password reset and important changes to the service.
- To answer support and access requests.
- To keep the service safe: prevent fraud, spam and abuse, enforce our Terms of Use, and investigate security incidents.
- To meet legal obligations.
We do not use your information for advertising, we do not build marketing profiles, and we do not use your content to train AI models.
3. Service providers
We use a small number of providers who process information on our behalf and only to run the service:
- Google Cloud: hosting, databases, encrypted file storage, sign-in infrastructure and server logs (United States).
- Apple Push Notification service, Google Firebase Cloud Messaging and Expo: delivering notifications to your device.
- Atlassian (Jira Service Management): handling support and access requests.
- Google Workspace: sending service emails.
- Google reCAPTCHA: protecting public forms from automated abuse.
4. When we share information
We do not sell, rent or trade your personal information. We share it only:
- with the service providers listed above;
- with your organization's administrator, if your organization provides your account, to the extent needed to manage it (administrators cannot read your encrypted messages);
- when required by law or a valid legal request (because messages are end-to-end encrypted, we cannot provide their content);
- to protect the rights, safety or property of our users, the public or Ironclad;
- as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to your information.
5. How long we keep information
- Account information is kept while your account is active.
- Encrypted messages and files are kept until they are deleted from the conversation or your account is deleted.
- Technical logs are kept for up to 30 days, unless needed longer to investigate a security incident.
- Support and access requests are kept as long as needed to resolve them and for our records.
- Backups are overwritten on a rolling basis within 30 days.
6. Deleting your account
You can ask us to delete your account at any time. Email support@ironclad.chat from the email address on your account, or use Contact support in the app. We will confirm the request and delete your account, your profile and the data stored for it within 30 days. After that it is removed from backups as they expire. Encrypted messages you already sent may remain on the other participants' devices.
7. Security
We protect your information with end-to-end encryption for content, encryption in transit (TLS) for all connections, encryption at rest in our cloud infrastructure, optional two-step verification and passkeys, and restricted access for our staff. No system is perfectly secure, but we work to protect your information and will notify you if a breach affects you, as required by law.
8. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict certain processing. This includes rights under the GDPR and the California Consumer Privacy Act. To exercise these rights, contact support@ironclad.chat. We will respond within the time required by law and will not discriminate against you for exercising them. You may also complain to your local data protection authority.
9. International transfers
Our servers are located in the United States. If you use Ironclad from another country, your information will be transferred to and processed in the United States, with appropriate safeguards.
10. Children
Ironclad is not directed to children under 13, or under 16 where local law requires it. We do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. We will post the new version here with a new "Last updated" date. If the changes are significant, we will notify you by email or in the app before they take effect.
12. Contact us
Questions about this policy or your information: support@ironclad.chat.