Privacy Policy
Effective 27 October 2026. Applies to the amend Android app (package app.amend.messenger).
In short: amend has no accounts, no ads, no analytics and no tracking. You don’t give us a phone number or email. Your messages, calls and media are end-to-end encrypted on your phone before they leave it. We, the developer, run no server that stores your messages and we cannot read them.
Who we are
amend is a private messenger focused on environmental awareness, developed by Ahmed Bhuiyan Faisal, an independent developer based in Finland (“we”, “us”). amend is built on the open Nostr protocol.
Your identity
When you start amend, it creates a cryptographic key pair on your phone. The private key is stored in Android’s secure storage and never leaves your device unless you copy your backup key yourself. We never receive it. If you lose it without a backup, nobody, including us, can recover it.
Your public key (your “amend ID”, starting with npub1) identifies you to other people, like a username.
Data the app handles
Relays and file servers can see technical metadata needed to deliver data: the recipient’s public key, an approximate time, the size of the encrypted data, and your IP address.
Why the app asks for permissions
A short video from us that explains why amend asks for location and other permissions, and what each one is used for.
What we do not do
- We do not sell, rent or share your personal data for advertising.
- We do not use analytics, crash-reporting or advertising SDKs.
- We do not collect your contacts, phone number or email address.
- We do not operate a central server holding your messages.
Third-party services
amend connects to these services to work. Each one sees your IP address, as any website does, and has its own privacy policy:
- Nostr relays (independent operators, configurable in Settings, Your network): store and forward encrypted messages and public profile/eco-map data.
- Blossom file servers (e.g. nostr.download, blossom.yakihonne.com): store encrypted media and public eco-map photos.
- Cloudflare: issues short-lived TURN credentials and relays encrypted call traffic on strict networks.
- Google STUN and Cloudflare STUN: help find a direct network path for calls.
- Open-Meteo: weather, air-quality and flood forecasts for your rounded location.
- OpenStreetMap: map tiles for live location and the eco map.
- Google Play services (Nearby Connections): used only for the optional offline mesh.
How long data is kept, and deleting it
Data on your phone stays until you delete it. Delete a single conversation from the chat list, or remove everything with Settings, Privacy and security, Remove identity, which erases your key and all messages from the phone. Uninstalling the app also removes its local data.
Encrypted messages and media on relays and file servers are kept according to each operator’s own rules; many delete old data after some time. Because they are encrypted, they are unreadable without your key. Public data you posted (profile, eco-map reports) may remain on third-party relays, which we do not control.
Security
Encryption happens on your device with keys only you hold. No method of transmission or storage is perfectly secure, so keep your phone locked and your backup key private.
Children
amend is not directed at children under 13, and we do not knowingly collect data from them.
Your rights
Because we do not hold your personal data on our own servers, most of it is under your control on your device. If you live in the EU/EEA you have rights under the GDPR, including access, correction and deletion. Contact us and we will help with anything we are able to act on.
Changes
If this policy changes, we will update this page and the effective date above. Significant changes will also be noted in the app’s release notes.
Contact
Questions about privacy: use the developer email address shown on amend’s Google Play listing.
