Vojo · Legal

Privacy Policy

Effective 13 May 2026

This is the privacy policy for Vojo, a chat app built on the open Matrix protocol. It's maintained by the Vojo Project, an independent developer. If you have questions about anything here, write to vojochatdev@gmail.com.

We try to keep this short and readable. If something is unclear, ask.

How Vojo works, briefly

Your messages, profile and rooms live on a Matrix server. By default that's vojo.chat, which we run. You can also sign in to any other Matrix server you trust — if you do, the operator of that server is the one holding your data, not us.

What we hold and what we use it for

To make the app work we keep the obvious things: your account, the messages and rooms you send and receive, the media you share, and basic technical data (IP address, connection times) generated when your device talks to our servers. Your device also caches messages and keys locally so you can read them offline and stay signed in.

Direct conversations are end-to-end encrypted by default. In an encrypted room we can see who's talking to whom and when, but not what they're saying. In an unencrypted room we see the content too.

Voice calls are encrypted between participants. When your device can't reach the other side directly, the audio is relayed through our infrastructure on its way through — we don't record it and we don't keep it.

We use this data to run the service: deliver messages, sync your devices, ring your phone for incoming calls, keep limited logs to fight abuse and spam. That's the whole list. No advertising, no analytics, no resale, no profiling.

Who else is involved

Permissions on your phone

On Android we ask for: the microphone (only used during calls); notifications (so we can show you messages and ring for calls); permission to show calls over the lock screen and to keep a call running with the screen off; and network access. That's it. We don't touch your address book, photo library, SMS, precise location or call log.

How long we keep things

Your messages and account stay on your Matrix server until you delete them or ask us to deactivate the account. Deletion is processed within about thirty days. Server access logs are kept for no more than thirty days and then rotated out.

Data cached on your device goes away when you uninstall Vojo or clear its data in your phone's settings. Signing out ends your session but doesn't always scrub every cached message immediately — the cleanest reset is an uninstall.

Your rights

If you live in the EU/EEA (and in many other places the law works similarly), you can ask us to show you what we hold, fix something that's wrong, delete your data, hand it over in a portable form, or stop a particular use. You can also withdraw any consent you've given for optional features, and complain to your local data-protection authority if you think we're handling things badly. Email the address at the top and we'll take it from there.

Kids, changes, contact

Vojo isn't aimed at anyone under 16, and we don't knowingly collect data from children. If we change this policy in a way that actually affects you, we'll update the date above and try to flag it inside the app. The current version always lives at vojo.chat/privacy. For anything else: vojochatdev@gmail.com.