Calamus3 Privacy Policy

What you give us

Creating an account requires a username, a password, and a recovery password. That is all. We do not ask for a phone number, an email address, a real name, or a date of birth, and there is nowhere in the app to provide one.

The recovery password is required because there is no email on your account. If you forget your password, it is the only way back in — we cannot reset it for you and we cannot identify you by any other means.

You may optionally add a display name, a profile picture, a short bio, and a country. These, with your username, make up your profile, which any signed-in user can see — that is how people find you by username. Nothing else about your account is visible to other users: not your settings, and not who you have blocked. Your country is used to suggest people near you in Discover unless you opt out in Settings. Profile pictures are stored privately on our servers and shown only to signed-in users, but unlike messages they are not end-to-end encrypted.

Passwords and recovery passwords are stored only as bcrypt hashes. Nobody, including us, can read them back.

What the app stores as you use it

Your messages are not stored on our servers. They are end-to-end encrypted and kept on your own device — see the next section. What our servers do hold:

• Encrypted messages waiting to be delivered. A message is held, in a form we cannot read, only until the recipient's device collects it, then deleted. Anything not collected within 30 days is deleted anyway. We can see who it is from, who it is for, which conversation, when, and roughly how large it is — not what it says.
• Encrypted attachments waiting to be delivered — photos, videos, voice notes and files, encrypted on the sender's device. Deleted once every recipient has downloaded them, or after 30 days.
• Public encryption keys for your device, so others can send you encrypted messages. The matching private keys never leave your device.
• Your chat backup, if you turn it on. It is encrypted on your device with a recovery code only you have; we store a file we cannot open.
• Conversations and group membership — who is in a conversation, group names and cover images, and who administers a group.
• Contact requests you send or receive, and the list of accounts you have blocked.
• Whether the app is open. While Calamus3 is on your screen it tells our server every minute or so, and we keep the time it last did. That is what the green “online” dot shows. You choose who sees it in Settings → Online status visibility — everyone, only your contacts, or nobody — and our server enforces that choice. People you have blocked never see it.
• Call records — who started a call, who was in it, whether it connected, and how long it lasted. Not the audio or video, which is never recorded and never reaches our servers. See the section on calls below.
• Reports you submit about another user, including the reason, anything you write in the description, and — only if you choose to include them — the recent messages from that chat, as they appear on your device.
• Problem reports you send from Help & Support: what you write, and — only if you tick the box — technical details about your device and app version.
• Coins, if you use Entertain & Earn — your balance and a record of each time coins were earned or spent: when, how many, the ad network's or game provider's transaction reference, and the perks you unlocked. See the section on Entertain & Earn below.
• Cash-out records, if you cash out — the amount, the method (PayPal, virtual Visa or Amazon gift card), the email address you entered for that payout, and the payout provider's order reference and status. The email is kept only on that cash-out record; it is never added to your profile.
• Session records. When you sign in, our authentication provider records the session together with the device description and the IP address it was created from. This is what the device list in Settings shows you, so you can spot a session you do not recognise and sign it out.
• Push notification subscriptions, only if you turn notifications on in a web browser — a delivery address issued by the browser, the keys used to encrypt a notification, and a browser description. The Android app does not currently receive push notifications, so it creates none.

Your IP address is also used to rate limit sign-ups and sign-in attempts. What is recorded is not the address itself but a one-way fingerprint of it, which cannot be turned back into the address without our server's secret key. These records are deleted automatically within a day.

Everything travels between the app and our servers over an encrypted connection (HTTPS).

What the app does not collect

There is no analytics, no tracking pixel, and no third-party script in your chats, contacts or profile. The one exception is Entertain & Earn, which shows ads through an advertising SDK — described in its own section below, and only active when you choose to watch an ad or open the games. We do not build a profile of you ourselves, and we do not sell or rent your information to anyone.

We do not access your contacts, location, or photo library. A photo or file is only read when you pick it yourself to send.

There is no device fingerprinting. An earlier version of this app derived a fingerprint from your browser and hardware; it was removed in August 2026 and the stored fingerprints were deleted with it.

There are no in-app purchases. The app does not take payment, so it holds no payment card or bank information at all. Ads appear only in Entertain & Earn, and only when you tap to watch one — never in your chats.

Fonts are built into the app rather than loaded from a font service, so simply opening the app does not announce you to a third party.

Camera and microphone

The app asks for the microphone when you record a voice note or start or answer a call, and for the camera when you start or answer a video call. They are used only while you are doing that, nothing is recorded by us, and you can refuse or revoke either permission in your phone's settings — messaging works without them.

Messages are end-to-end encrypted and stay on your device

This is the most important thing on this page, so it is not buried: your messages are encrypted on your device and can only be decrypted on the devices of the people in the conversation. We cannot read them.

• Calamus3 uses the Signal Protocol — the same design used by Signal and WhatsApp. Each device creates its own keys; only the public half is sent to us.
• Your chat history is stored on your device, not on our servers. The server only relays encrypted messages and deletes them once delivered. Edits, deletions, reactions and read receipts are encrypted the same way.
• Because we hold no readable messages, we cannot hand message content to anyone, including if we are legally required to. We can only provide what we actually have: the account and delivery information listed above.
• What we can still see is metadata: which accounts are in a conversation, and when encrypted messages pass between them.

One device per account. Signing in on a new phone moves your account to it; the old device is signed out and its copy of your chats is removed. Messages are not moved to the new device unless you turned on chat backup.

If you lose your device. Without a backup, your chat history is gone — there is no copy anywhere else, which is the point. With chat backup on, you can restore your messages on a new device using your recovery code. Backups do not include photos, videos, voice notes or files.

You can compare a security code with the person you are talking to (tap “End-to-end encrypted” at the top of a chat). If the codes match, nobody — including us — has substituted their own keys.

Calls

Voice and video calls travel directly between the two devices and are encrypted between them (WebRTC, DTLS-SRTP). They are never recorded, never stored, and never pass through our servers in a form anyone could listen to.

To find that direct route, both devices ask a public “STUN” server run by Google for their own internet address; it sees the addresses involved and nothing of the call. On some restrictive networks a direct route is impossible. A relay can bridge those calls — it forwards packets it cannot decrypt — but none is currently configured, so on such networks a call may not connect.

One consequence worth knowing, which is true of every app built on this technology: on a direct call, your IP address is visible to the person you are calling, because a direct connection is by definition between the two of you.

One limit, stated plainly: the keys for a call are exchanged through our server, and the chat security code does not yet cover calls. A compromised server could in principle place itself in the middle of a call. Messages do not have this limit.

Entertain & Earn: ads, games and cash-out

Entertain & Earn is being introduced gradually: if your version of the app has no Earn tab, nothing in this section applies to you yet, and the app contains no advertising code. Where it is available, it is optional. Nothing in this section happens unless you open it and choose to watch an ad, open the games, or cash out. It never has access to your messages.

Watching ads. Rewarded videos are provided by Google AdMob, which may show an ad from Google or from other ad networks it works with. To show and measure ads, Google and those networks receive information from your device, including your Google Advertising ID, device and operating-system details, your IP address, and how you interacted with the ad. We give AdMob an identifier for your Calamus3 account — a random ID, not your username — so that when you finish a video, Google's server can tell ours which account to credit. That information is handled under Google's privacy policy and those of the networks it uses. You can reset or delete your Advertising ID, or opt out of personalised ads, in your phone's Settings → Privacy → Ads.

Playing games. “Play Games” opens a game offerwall run by a partner provider, which receives the same random account ID so it can credit you, and collects gameplay information under its own privacy policy. It rewards active play only.

How coins are credited. Coins are added only when the ad network or game provider confirms the activity directly to our server — never on the word of the app itself. Coins for the ads you finish are added the next day, worked out from the app's total ad earnings that AdMob reports to us each day — a daily total per ad placement, with no information about you. We keep the record of each finished ad for 30 days. To prevent fraud we record each confirmation's reference, apply daily limits, hold game rewards for a short period before they can be cashed out, and remove coins the provider later reports as fraudulent.

Cashing out is for people aged 18 and over. Payouts are sent by Tremendous, our payout provider, which receives the amount, the reward type and the email address you enter, and delivers the reward — a PayPal payment, a virtual Visa card or an Amazon gift card — whose own terms and privacy policy then apply. We do not receive or store your PayPal, card or Amazon account details. To protect payouts from fraud, a cash-out request is first checked with Google Play's Play Integrity service, which confirms the app is the official version from Google Play running on a genuine device; Google processes information about the app and device for that check under its own privacy policy, and we receive only its verdict.

Who else handles your information

• Supabase — hosts the database, account authentication, file storage, realtime delivery, and the app's server code, and is bound by its own agreement to process data only on our instructions. Everything described above under “what the app stores” lives here.
• Google — the STUN server described under Calls. Only during calls.
• Google AdMob and the ad networks it works with — only when you watch an ad in Entertain & Earn, as described above.
• Our game offerwall provider — only when you open Play Games.
• Tremendous — only when you cash out, and only the payout details described above.

Notifications — in a web browser, where they exist today — say who a message is from, never what it says, because we do not have what it says. You can hide the sender's name too in Settings. They are delivered through the browser's own push service (for example Google or Mozilla), encrypted to keys held by your device.

We may disclose information if we are legally required to, or where we believe in good faith that it is necessary to prevent serious harm. That can only ever be the account and delivery information described above: we do not hold readable messages.

Reports and moderation

If you report a user, the report — including whatever you write in it and the identity of both accounts — is visible to moderators, who can suspend an account. Moderation decisions are recorded so there is a record of who did what and when. Do not put anything in a report description that you would not want a moderator to read.

Because chats are end-to-end encrypted, moderators cannot look at a conversation. When you report someone from a chat you can choose to include its recent messages; if you do, they are sent from your device with the report and moderators can read them. If you do not, moderators see only the report itself.

How long things are kept, and deleting your account

Messages are kept on your device until you delete them. On our servers, an encrypted message or attachment exists only until it is delivered, and never longer than 30 days. If a conversation has disappearing messages turned on, each device deletes those messages by itself once their timer expires. “Delete for everyone” asks the other devices to delete their copy; a modified app could ignore that request, as with any messenger.

You can delete your account yourself, at any time, from Settings → Delete account permanently. No email to us, no waiting period. Deletion removes your account, your profile, your keys, anything still waiting to be delivered, your chat backup, your uploads, your one-to-one conversations, your contact requests, your call records, your reports and problem reports, your notification subscriptions, and your coins, perks and cash-out records. Groups you created are deleted with it, and the chats on the device you delete from are erased. Unspent coins are lost when an account is deleted; cash out first if you want to keep their value.

Records held by others under their own policies are outside our control: Google AdMob and the ad networks keep ad data, and Tremendous keeps its record of any payout it sent.

Two honest limits. Deletion cannot reach a copy someone else has already made — a screenshot, or a message you sent that someone saved elsewhere. And our database provider keeps routine backups for operational recovery, so deleted data can persist in those backups for a short period before they age out.

Your choices

You can change or delete your profile information at any time, review and sign out individual devices from Settings, block another user, turn notifications off, and delete your account outright. If you want a copy of the information associated with your account, or have a question this policy does not answer, contact us from Settings → Help & Support or at the address below.

Because accounts carry no email address or phone number, we have no way to verify that you are the holder of an account other than your being signed in to it. Requests about a specific account may therefore need to be made from within the app.

Children

Calamus3 is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has created an account, contact us and we will remove it. Cashing out coins is limited to people aged 18 and over.

Changes to this policy

If this policy changes, the date at the top of the page changes with it. Where a change materially affects what is collected or who can see it, we will say so in the app rather than relying on you to re-read this page.

Contact

TalalTech
contact@thequreshico.ca