Privacy Policy

This Privacy Policy explains what information Future Message collects, what we do with it, who we share it with, and the choices you have. It applies to our website at futuremsg.app, the web app at go.futuremsg.app, and the emails we send (together, the "Service").

Future Message is built so that we cannot read your messages. Recordings, titles and notes are encrypted on your device before they reach us, and only you and the people you send them to hold the keys. This policy describes the information we can see, and what happens to it.

1. Who we are

The Service is operated by:

TOUCHEVER sp. z o.o.
ul. 3 Maja 5/34, 41-300 Dąbrowa Górnicza, Poland
KRS: 0000694587 · NIP: 6292482597 · REGON: 368234900

("we", "us", "our"). For anything related to this policy or your information, write to info@touchever.com.

2. The short version

• We cannot read your messages. They are end-to-end encrypted.
• We do not sell your personal information, and we do not share it for advertising.
• We set no cookies, and we run no analytics, advertising or tracking on the website or in the app.
• We send emails that the Service needs in order to work. We send no marketing.
• Your information is stored in the United States, on Amazon Web Services.

3. Information we collect

Information you give us

• Account information: your email address and a display name. If you don't choose a display name, we use the part of your email address before the "@". We also record when you created the account, when you confirmed your email address, and which version of our Terms and this policy you accepted, and when.
• Your password — which we never receive. Your device turns your password into two separate keys. One proves who you are when you sign in; we store only a one-way hash of it. The other unlocks your messages and never leaves your device.
• Security and recovery settings: if you turn on two-step verification, we store its secret in encrypted form, and your recovery codes only as one-way hashes. If you choose trusted contacts to help you regain access, we store who they are, the encrypted recovery shares you give them, and the requests and answers that make up a recovery.
• Messages ("capsules"): audio or video you record, with an optional title and note. All of this is encrypted on your device. We store it only in encrypted form, and we have no key to open it.
• Encryption keys: the public keys that let others send you messages, and your private keys, stored only in a form encrypted with a key derived from your password.

Information we can see about your messages

To deliver a message on time and to the right people, our servers need some facts about it in readable form:

• who sent it and who it is for;
• the delivery rule, including the date it should be released;
• whether it is audio or video, and its size;
• when it was created, sealed, released or deleted;
• whether it is a reply to another message;
• whether its recipients are allowed to know that it exists, and to see its date;
• when a recipient first opened it.

Information about people you invite

You can invite someone who doesn't have an account yet by entering their email address. We use that address once, to send the invitation (and, if you choose, a limited number of reminders), and then we discard it. We keep only a one-way hash of the address, so we can match it when that person signs up, and honor their request if they ask not to be contacted again. The name you give a contact is encrypted with your own key; we cannot read it.

Information collected automatically

• IP address: our servers see the IP address of every request. We use it to protect the Service against abuse (for example, to limit repeated sign-in attempts), and it appears in our server logs.
• Server logs: for each request, the address requested, the time and the IP address. We remove passwords, keys, tokens and similar values from our logs. We do not log your browser type or device details.

We do not collect your location, your contacts list, or your phone number.

Device permissions

The app asks for access to your microphone, and to your camera only when you record a video. It uses them only while you are recording. You can withdraw that access at any time in your browser settings.

4. How we use information

We use the information above to:

• create and secure your account and sign you in;
• store your messages and deliver them to the people you choose, at the time you choose;
• let you regain access through recovery codes or trusted contacts;
• send you the emails the Service needs (see section 9);
• protect the Service and its users against fraud, abuse and security incidents;
• understand and fix technical problems;
• measure how the Service is used, in aggregate and using only the information described above, without third-party tools;
• comply with the law and enforce our Terms.

We do not use your information for advertising, and we do not build profiles of you.

5. Legal bases

Where the law that applies to you requires a legal basis for using personal information, we rely on:

• performing our contract with you: providing the Service you signed up for (account, storage, delivery, recovery, service emails);
• our legitimate interests: keeping the Service secure, preventing abuse, and sending an invitation and reminders on behalf of a user to the person they invited;
• legal obligations: for example, responding to lawful requests from authorities;
• your consent: access to your microphone and camera, which you can withdraw at any time.

6. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only:

• With the people you send messages to: they see your display name, and, depending on the choices you make for a message, that it exists and when it will arrive. On release, they can open its content. People you invite see your display name in the invitation. They never see your email address from us.
• With our service provider: Amazon Web Services hosts the Service, stores its data and sends our emails. It processes information only on our behalf.
• With the drand network: to check whether a date-locked message may be opened yet, the app asks a public timekeeping service (drand, including a relay run by Cloudflare) for a number. Like any website, it sees your IP address; it receives nothing about you or your messages.
• When the law requires it: if we must respond to a valid legal process, or need to protect the rights, property or safety of our users, the public or us. Because your messages are end-to-end encrypted, we cannot hand over their content — we don't have it in readable form.
• In a business transfer: if we are involved in a merger, acquisition or sale of assets, your information may be transferred as part of it. This policy will continue to apply to it.

7. Cookies, browser storage and tracking

We set no cookies, and we use no analytics, advertising pixels or third-party scripts — on the website or in the app. The app does keep some information in your browser so it can work — for example, keeping you signed in while the tab is open, and saving recordings you haven't sealed yet. The full list is on our Privacy choices page.

Do Not Track and Global Privacy Control. Because we don't track you across websites, there is nothing for these signals to switch off. If your browser sends them, the Service behaves the same.

8. Where your information is stored

Your information is stored and processed in the United States, in Amazon Web Services data centers. If you use the Service from outside the United States, your information will be transferred to, and processed in, the United States.

9. Emails we send

We send emails that the Service needs: to confirm your address; about sign-in and security (password changes, two-step verification, recovery); about messages (invitations, a message waiting for you, your message delivered, answers to requests); and on your behalf to people you invite. These emails contain no tracking pixels and no tracked links. Email subjects are written so they reveal nothing private on a lock screen.

We do not send marketing or newsletters.

10. How long we keep information

• Account information: for as long as your account exists.
• Messages: an encrypted message is kept so that it can be delivered on its date, and after release so that you and your recipients can still open it.
• Messages you delete: they are removed from your account and can no longer be opened in the Service. Their encrypted copy currently remains in our storage; we are building permanent erasure.
• Unconfirmed sign-ups: removed after 7 days if the email address is never confirmed.
• Invitations: expire after 30 days. We keep only the hashed address, so we can honor "don't contact me again".
• Server logs: 30 days.
• Backups: database backups are kept for 7 days.

Closing your account. You can ask us to close your account by writing to info@touchever.com from the email address on the account. Within 45 days we will delete your account and the information connected to it, including the messages you created, whether or not they have been delivered. Messages that have not been delivered yet will not be delivered. Copies that your recipients have already downloaded to their own devices are beyond our reach. Deleted information disappears from our backups within 7 days. We may keep limited information where the law requires it, or to prevent abuse — for example, the hashed email addresses of people who asked not to be contacted, so that their request keeps being honored.

11. How we protect information

• Messages are end-to-end encrypted on your device, using modern and post-quantum algorithms.
• All connections to the Service are encrypted (HTTPS).
• Data at rest — databases, file storage and backups — is encrypted, and storage is not publicly accessible.
• Our server code has no means to decrypt your messages, and there is no administrative backdoor.

No system is perfectly secure, and we cannot guarantee absolute security.

Your password and Recovery Key matter. Because we cannot read your messages, we also cannot recover them for you. If you lose your password and your Recovery Key, and have no trusted contacts set up, your messages cannot be opened — by you or by us.

12. Your rights and choices

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct information that is inaccurate;
• delete your personal information;
• receive a copy of your information in a portable format;
• object to or restrict certain uses of your information;
• withdraw consent where we rely on it;
• appeal our decision on your request.

Some of this you can do yourself: you can change your display name in the app, and download everything in a delivered message with "Download everything".

For anything else, write to info@touchever.com. We will need to confirm that the request comes from the account holder, usually by replying from the email address on the account. We respond within 45 days, or sooner where the law that applies to you requires it. You may use an authorized agent where the law allows it. We will not treat you differently for exercising your rights.

California residents. In the past 12 months we collected the categories of information described in section 3: identifiers (email address, display name, IP address), account and security information, and audio or video content (which we hold only in encrypted form). We collected it from you and from the users who invite you, for the purposes in section 4, and disclosed it only as described in section 6. We have not sold or shared personal information, as those terms are defined under California law.

You also have the right to lodge a complaint with your local data protection authority.

13. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, write to info@touchever.com and we will delete it.

14. Changes to this policy

We may update this policy. Each version carries its effective date at the top. If we make a material change, we will tell you by email or in the app before it takes effect.

15. Contact us

TOUCHEVER sp. z o.o., ul. 3 Maja 5/34, 41-300 Dąbrowa Górnicza, Poland
info@touchever.com