KaChat
KaChat home

Privacy Policy

This policy covers KaChat, KaPost, KaPay and KaPlay on iPhone, iPad and Android, KaChat Desktop, the KaPay Extension for your browser, and this website. All of them are self-custody apps on the Kaspa BlockDAG: there are no KaChat accounts, and we don't collect personal data from you.

The apps are published by Cyber Ventures LLC ("we"). They are fully open source and run on the public Kaspa network, so they don't rely on any company to work.

Cyber Ventures LLC · Effective October 27, 2026 · Questions: [email protected]

No accountsNo sign-up, no email, no phone number. Your Kaspa address is your identity.
Your keys stay with youYour seed phrase and private keys never leave your device.
No trackingNo analytics, no advertising and no tracking in the apps or on this site.

1. What stays on your device

  • Your seed phrase and private keys are stored only on your device: in the iPhone Keychain, in Android's encrypted storage, or in your browser locked with your password for KaChat Desktop and the KaPay Extension. They are never sent to us or anyone else.
  • Your messages are decrypted on your device. Your contacts, chat history, settings, Address Book and Portfolio entries are kept on your device too.
  • The camera and microphone are used only when you scan a QR code, record a voice message or make a call. Nothing is recorded or kept unless you send it.

2. What is public on Kaspa

Everything the apps do happens through Kaspa transactions, and the Kaspa BlockDAG is public. Anyone can see a transaction's addresses, amount and time.

  • Messages in KaChat are end-to-end encrypted, so only you and the person you write to can read them. That they were sent, between which addresses and when, is visible on chain.
  • Public by design: KaPost posts, replies, likes and follows, public chat room messages, KaPlay chess moves, .kachat names and your KaChat profile are meant to be seen by everyone.
  • What is written to the blockchain can't be changed or deleted, by you or by us.

3. Services the apps connect to

To work, the apps talk to public services. These requests carry your public Kaspa addresses, which are already visible on chain. They never carry your seed phrase, passwords or private keys. Like any internet request, each service can see your IP address, and each has its own privacy practices.

  • Kaspa nodes and the Kaspa REST API (api.kaspa.org): balances, transaction history, and sending the transactions you approve.
  • The KaChat indexer (indexer.kachat.app): finds your messages, posts, games and .kachat names on chain. It only ever sees encrypted message contents and public data, and keeps no record of who asked.
  • Name services: .kachat names, KNS (.kas), dotk (.k) and Kaspa Names (.kaspa), when names are shown or looked up.
  • Prices (CoinGecko and fallbacks) for KaPay's Portfolio and KaChat Desktop. No address is sent.
  • Social platforms such as X, YouTube or Discord, only when a profile links one: the app loads that account's public picture, banner or bio.
  • Translation, only when you tap translate: the message text is sent to KaChat's translation service.
  • Swap in KaChat Desktop, only when you use it: the exchange partner (ChangeNOW) receives the swap details you confirm.
  • Block explorers, only when you open a "view in explorer" link.

4. Notifications

If you turn on notifications, the app registers your device's push token and the addresses to watch with KaChat's push service, so it can tell your phone when something arrives. Notifications are delivered by Apple Push Notification service on iPhone and Firebase Cloud Messaging on Android. The notification says something arrived; your messages stay encrypted. Turn notifications off in the app to unregister.

5. Calls

Voice and video calls in KaChat connect your device directly to the other person's with WebRTC and are encrypted. To find a route between you, the app asks a public STUN server (stun.nextcloud.com), which sees your IP address. The person you call can also see your IP address, as with any direct connection.

6. Backups

You can choose to back up your history, Address Book or Portfolio to your own Nextcloud. Backups go only to the server you connect, never to a KaChat server. You can stop backups and disconnect at any time.

7. This website

  • home.kachat.app uses no cookies, no analytics and no advertising.
  • The Stats page reads public counts from the KaChat indexer in your browser.
  • The Feedback page sends nothing itself: it opens your own email app with your message filled in, and only what you send reaches us.
  • Like most web servers, ours keeps standard access logs (IP address, page and time) for security and to keep the site running.

8. Removing your data

Log out or remove your account in any app, or delete the app, to erase what it stored on your device. KaChat Desktop and the KaPay Extension keep their data in your browser; removing the account or the extension erases it. Your Kaspa stays on the blockchain and comes back with your seed phrase. What was written on chain stays there.

9. Changes

If this policy changes, the new version will be posted on this page with a new effective date.

10. Contact

Questions about privacy: [email protected]. You can also use the feedback page.