Privacy Policy

Kursal is built with privacy as its foundation. We believe your conversations belong to you, and we've designed our system to ensure we literally cannot access your messages.

Because the Kursal app is peer-to-peer and fully decentralized and we do not want to invade your privacy:

• ✗ No access to encryption keys
• ✗ No analytics or usage tracking
• ✗ No conversation metadata

The Kursal app itself collects nothing. The only data we ever hold is what you explicitly hand us:

• + Email addresses, only if you subscribe to our newsletter on this website
• + Crash reports, only if you send one from the pop-up after a crash

Both are self-hosted on our own servers in Germany. We never share, sell, or otherwise hand off this data to anyone. You can unsubscribe from the newsletter at any time via the confirmation email, or reach us by email if you need help.

Your encrypted messages go through public relays. Those relays can track some limited informations about you:

• ▸ Your IP address (can be changed with a VPN)
• ▸ When you send messages
• ▸ Your Peer ID and the destination Peer ID (which periodically rotates and makes the 'when' harder to track)

All encryption happens locally on your device. Messages are transmitted directly between peers using end-to-end encryption. There is no central server that processes or stores your communications. Even if your messages transit through public relays, no one but the receiver can decrypt them.

This website does not use cookies but tracks the number of visitors using Plausible, a privacy-friendly tracking platform, which is self-hosted in our case.

Kursal is fully open source. You can audit our code at any time to verify our privacy claims. We encourage security researchers to review our implementation.