Privacy Policy

Last updated: 30 June 2026

Dialog ("Dialog", "we", "us") is a messenger for chat, group voice & video calls, and screen sharing, available in the browser and as desktop and Android apps. This policy explains what data we collect, why, and your choices. By using Dialog you agree to this policy.

Dialog is open source (AGPL-3.0). Anyone can read the code, verify how data is handled, or self-host their own instance — in which case the operator of that instance, not us, is the data controller.

1. Information we collect

Account data — your username (login), display name, and password. Passwords are stored only as a salted hash; we never store or see your plaintext password.
Profile — optional avatar, description, and status (online / do not disturb / invisible).
Messages & media — the content of messages you send (text, images, voice notes, GIFs, files, reactions, edits) and the chats/groups they belong to. These are stored so your conversations sync across devices.
Contacts & groups — your friend relationships, blocks, and group memberships.
Technical data — connection metadata needed to operate the service (e.g. delivery/read receipts, presence, and standard server logs such as IP address and timestamps).
Push subscriptions — if you enable notifications, the push endpoint and keys your browser/device provides.

2. Local storage on your device

We store a login token and some preferences in your browser's local storage to keep you signed in. The desktop and Android apps are thin wrappers around the same web app and store the same data locally on your device. We do not use third-party advertising or tracking cookies.

3. Calls & screen sharing

Voice/video calls and screen sharing use LiveKit as the real-time media server, and TURN relay servers to connect peers behind restrictive networks. Live audio/video/screen streams pass through these servers to reach other call participants; call media is not recorded or stored by us.

4. Third-party services

To provide certain features, limited data is shared with:

LiveKit & TURN/relay providers — to route call and screen-share media.
Giphy — when you search for GIFs, your search query is sent to Giphy to return results.
Link previews — when a link is shared, our server may fetch that URL to generate a preview (title/image).
Web Push services — your browser/OS push provider (e.g. Mozilla, Apple, Google) delivers notifications you've enabled.

5. How we use your data

To operate the messenger — deliver messages, sync chats, place calls, and show presence.
To authenticate you and keep your account secure.
To send notifications you've opted into.
To maintain reliability and prevent abuse/spam.

We do not sell your data or use your messages for advertising.

6. Storage & security

Data is stored in a MySQL database with a Redis cache, on servers located in the EU (Frankfurt region). Traffic is encrypted in transit (HTTPS/WSS). Passwords are hashed. No method of storage or transmission is 100% secure, but we take reasonable measures to protect your data.

7. Data retention

We keep your account and messages until you delete them or your account. Deleting a message or leaving/clearing a chat removes it from our active database. Backups and logs are retained only as long as needed to operate the service.

8. Your rights

You can view and edit your profile, delete individual messages, clear chats, and request deletion of your account and associated data. Depending on your location (e.g. the EU/GDPR), you may have rights to access, correct, export, or erase your data. To exercise these, contact us below.

9. Children

Dialog is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect data from children below that age.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

11. Contact

Questions or data requests: vanylix@proton.me.