Privacy

Who is responsible

Jeioo is operated by an individual, not a company: Zohrab Taghiyev, in Azerbaijan. Throughout this page, “we” means that one person. For anything about your data, write to contact@jeioo.com.

The short version

• We built Jeioo so that we cannot read your messages. The server stores encrypted bytes it has no keys for.
• We do not ask for a phone number or an email address, we show no ads, and we run no analytics or third-party trackers.
• We never sell or share your data. The only outside services involved are Apple’s and Google’s push notification systems.
• Everything we do hold is listed on this page, plainly.

What we cannot see

Messages, attachments, voice notes, reactions and stickers are end-to-end encrypted between the devices in a conversation, using the Messaging Layer Security protocol (MLS, RFC 9420). Our server relays and stores ciphertext; the keys exist only on your devices. Nobody, including the operator, can decrypt a conversation, and we cannot restore it for you if you lose access to it.

If you attach a conversation excerpt to a report, you are choosing to reveal that excerpt to a moderator. The app tells you before you confirm.

Your account

To register you choose a username, a password and a secret word, and you tell us your date of birth. We keep:

• Your username, and the display name, avatar and bio you choose to add.
• Your password, stored only as a salted hash.
• Your date of birth — Jeioo is for people aged 16 and over.
• A one-way hash of your secret word, used only to confirm it is you when you reset a forgotten password. The word itself is never stored; on your device it derives the key that protects your message history.
• Your settings, your in-app balance and its transaction history, your referral code, a two-factor secret if you turn two-factor on, and the version of the terms you accepted.

Your conversations

The content is encrypted, but running a messenger means knowing some things about its shape:

• Which accounts are in which conversation, and who you have added as a contact or blocked.
• For every message: the sender, the conversation, the time and the size — never the text.
• Encrypted message and attachment blobs, kept so your history can follow you to a new device.
• Public keys and key packages for each of your devices, an encrypted backup of your device’s key state, and entries in a public, append-only key directory that lets other people’s devices verify yours.

Devices, sessions and sign-ins

• Each device you sign in with: its name, its kind, when it was last seen, and its push token if you allow notifications.
• Session tokens, stored as hashes, so a stolen database cannot be used to sign in.
• A security log of sign-ins and sensitive account actions with the IP address and browser or app used — the trail that lets you, and us, spot an account takeover.

Notifications

Push notifications reach your phone through Apple’s and Google’s services. A notification carries at most who wrote to you — never the message. Web notifications use the Web Push standard the same way.

Server logs and abuse prevention

Like any web service, our server keeps access logs: IP address, browser identification, the path requested and the time. They exist to keep the service up and to stop abuse, they are kept for up to 30 days, and they are never joined to your conversations. Rate limits and an intrusion-prevention system act on these logs; an address that attacks the service may be blocked and reported to the CrowdSec community blocklist.

Crash reports and metrics

When the app crashes it can send a report to our own crash server, which runs on the same machine as Jeioo. Reports carry the app version, the device model and the stack trace, with personal data switched off and file paths scrubbed. Service metrics and logs stay on our server and are deleted after 30 days.

Moderation

You can report a user, a message, a group or a sticker pack. We look at reported content only, in order to decide what to do about it, and we keep the report and the decision so that an appeal can be reviewed. We do not, and cannot, read conversations nobody has reported.

Cookies and local storage

The web app sets two cookies: one for your session and one that protects against cross-site request forgery. Your theme, language and an encrypted cache of your conversations are stored in your browser, on your device only. This site, jeioo.com, sets no cookies at all; it remembers your theme and language in your browser’s local storage. There are no third-party cookies and no tracking pixels anywhere.

Third parties

No outside company processes your data on our behalf. There is no content delivery network, no analytics vendor and no advertising network: fonts, scripts and images are served from our own server. The exceptions are the app stores you install from and the push services named above, which see a device token and a notification envelope, nothing more.

Where your data lives, and for how long

Jeioo runs on a single server we operate. Your account data and encrypted content are kept for as long as your account exists. Deleting your account from the app removes your account and your content; it cannot be undone. You can also set your account to delete itself after a period of inactivity that you choose. Logs and crash reports expire on the schedules above.

Your rights

You can see and change your profile and settings in the app, and delete your account there at any time. You can ask us for a copy of the account data we hold about you, or for a correction, by writing to contact@jeioo.com; we answer within 30 days. If you believe we have handled your data unlawfully, you can also complain to the data protection authority where you live.

Children

Jeioo is not for anyone under 16. We ask for a date of birth at registration, and we close accounts we learn belong to younger users.

Changes

When this page changes, the date at the top changes with it. If a change matters to you, we say so in the app before it takes effect.

Contact

Questions, requests and complaints about your data: contact@jeioo.com