Privacy Policy
1. Who we are
Balsso is operated by COUBUS OÜ, registry code 14419079, Vesivärava tn 50, 10127 Tallinn, Estonia ("we", "us"). We are the data controller for the personal data described here. Contact: [email protected].
2. What Balsso is built not to know
Balsso is an end-to-end encrypted messenger. Message text, attachments, voice notes, calls and group names are encrypted on your device with keys that never leave it. Our servers relay and briefly queue ciphertext they cannot read, and delete it once your device confirms delivery or after 30 days, whichever comes first. We keep no message history.
3. Data we process
- Phone number. Used to sign you in and to let contacts find you. We do not store the number itself: we store hashed values for sign-in and for contact discovery. Account recovery works by verifying the number again.
- Verification codes. To deliver a one-time code we pass your number to a delivery provider for verification codes (SMS, voice or messaging platform) for that single message. Providers process it under their own terms.
- Profile. Display name, username and avatar you choose. Avatars are encrypted on your device before upload.
- Device and keys. Device platform, app and system version, a name you give it, push token, and the public cryptographic keys your device publishes. Private keys stay on your device.
- Contacts. If you allow it, your app sends one-way hashes of the numbers in your address book to find which of them use Balsso. We answer and discard the request; we do not store your address book. Contacts you add by hand are stored on our server as a link between your account and theirs, because your privacy settings, such as who can find you by number, depend on them. They are deleted with your account.
- Registration PIN. If you turn it on, we store it only as a hash and ask for it when your number signs in on a new phone.
- Usage counts. For each account and day: whether the app was used, how many messages and files it sent, how many calls it joined, and minutes spent in calls and on the walkie-talkie. These are numbers only, never content, recipients or who talks to whom. We use them to run and size the service and to spot abuse.
- Technical logs. IP address and request metadata for abuse prevention and debugging, retained up to 24 hours in access logs and 14 days in system logs.
- Payments. Handled by Apple, Google or Stripe; we receive subscription status, never card details.
4. Why we process it (legal bases)
Performance of the contract with you (providing the service), our legitimate interest in keeping the service secure and free of abuse, and your consent where the app asks for it (contact discovery, notifications). You can withdraw consent in the app at any time.
5. Where data lives
Our servers are in the European Union. Delivery providers for verification codes may process your number outside the EU for the duration of delivery, under standard contractual clauses or an equivalent safeguard.
6. Retention
- Queued ciphertext: until delivered, at most 30 days.
- Encrypted attachments: 30 days.
- Account data: until you delete your account (in the app, or at balsso.com/delete-account); deletion removes the account and its keys within 24 hours.
- Encrypted backups of our database: daily copies 14 days, weekly 60 days, monthly 13 months, then overwritten. We never restore a single account from them.
- Usage counts: 30 days, then deleted.
- Logs: 24 hours (access) and 14 days (system).
7. Your rights
Under the GDPR you can access, correct, export or delete your data, object to processing and lodge a complaint with the Estonian Data Protection Inspectorate (AKI). Account deletion is available in the app; other requests go to [email protected].
8. SMS and messaging
We send text messages only to deliver one-time sign-in codes you request. We never send marketing by SMS and we do not share your mobile number with third parties for their marketing. See the SMS program terms.
9. Children
Balsso is not directed at children under 16, and we do not knowingly create accounts for them.
10. Changes
We will post updates on this page with a new effective date and, for material changes, notify you in the app.