Vojo · Legal

Privacy Policy

Effective 13 May 2026

How Vojo works

Vojo is a chat app built on the open Matrix protocol, maintained by the Vojo Project, an independent developer. Your messages, profile and rooms live on a Matrix server. By default that's vojo.chat, which we run. You can also sign in to any other Matrix server you trust — if you do, the operator of that server holds your data, not us. We try to keep this short; if anything is unclear, write to vojochatdev@gmail.com.

What we hold, and why

To run the app we keep your account and profile, the messages and rooms you send and receive, the media you share, and basic technical data such as your IP address and connection times. Your device also caches messages and keys locally so you can read offline and stay signed in.

We process this to deliver and sync your messages and to ring your phone for calls — that's our agreement with you. We keep limited logs to fight spam and abuse, which is our legitimate interest. Optional features run only if you turn them on, with your consent. We don't advertise, run analytics in the app, sell your data or profile you.

You can turn on end-to-end encryption per chat. It isn't on by default: in a chat without it, our server can see message content. With it on, we can see who's talking and when, but not what's said. Voice and video calls are encrypted between participants and may pass through our servers in transit; we don't record or store them.

Vojo AI

Vojo AI is an optional assistant. You don't have to use it — but if you start a one-to-one chat with it, every message you send in that chat is forwarded to third-party AI providers to write the reply: Grok by xAI (USA) and Google's Gemini (USA). In a group chat, only messages that mention it are sent. If a reply needs current information, your question may also be sent to Google Search to look it up. Each provider handles your text under its own privacy policy. By using Vojo AI you agree to your messages being sent to these providers to generate replies. Because they are in the United States, this transfers that content outside the EU; the transfer relies on your explicit consent to this optional feature. Replies are AI-generated and can be confidently wrong, so treat them as a first draft and please don't send secrets. You can read the providers' policies at x.ai/legal/privacy-policy and ai.google.dev/gemini-api/terms.

Who else is involved

Push notifications go through Google so your phone can wake and ring. For encrypted chats the notification carries only the routing info needed to fetch the message locally; for unencrypted chats it may include a short preview. Signing up loads a Google human-verification check (reCAPTCHA), and Google sees that interaction. If you choose to connect another network you use, such as a messenger you already have an account on, your messages with it pass through bridge infrastructure we run, and that network sees them too — none of this is on unless you turn it on.

Our servers are hosted in the European Union. Some of the above sends data to providers outside the EU. Apart from the Vojo AI transfer described above (which relies on your consent), those transfers are covered by Standard Contractual Clauses, or by an adequacy framework where the recipient is certified under one; a copy of the relevant safeguards, and the current list of providers, is available on request at the address above.

Permissions on your phone

On Android we ask for the microphone (used only during calls), notifications, permission to show and keep calls running over the lock screen, and network access. That's it — we don't touch your contacts, photo library, SMS, precise location or call log.

How long we keep things, and your rights

Your messages and account stay on your Matrix server until you delete them or ask us to deactivate the account. There is no in-app delete button yet: to have your account deleted, email vojochatdev@gmail.com with your @username:vojo.chat ID (the steps and details are at vojo.chat/delete-account). We complete deletion within about thirty days. Server access logs are kept no longer than thirty days. Data cached on your device is removed when you uninstall Vojo or clear its data in your phone's settings.

If you live in the EU/EEA (and in many places elsewhere the law is similar), you can ask us to show, correct, export or delete your data, restrict or stop a particular use, or withdraw a consent you've given — and you can complain to your local data-protection authority. Email the address at the top. Vojo isn't aimed at anyone under 16, and we don't knowingly collect children's data. The current version of this policy always lives at vojo.chat/privacy; if we change it in a way that affects you, we'll update the date above and flag it in the app.