GoMsg — Privacy Policy

1.General

This policy describes what data the GoMsg messenger ("the app") collects, how it is used and protected. By using the app you agree to the terms below.

GoMsg is a decentralized messenger: in addition to the public server gomsg.pro, the app can connect to self-hosted servers operated by third parties. For such servers this policy covers only the client app; data processing on a third-party server is governed by that server's own terms.

2.Data we collect

Data	Required?	Purpose
Username	Yes	Account creation, sign-in
Display name	Yes	Identifying message authors
Password (irreversible hash only)	Yes	Authentication
Email address	No	Account recovery, communication
Messages and attachments (photos, files, voice)	No	Chat delivery and history
In-app contacts list	No	Contacts feature
Device identifier (FCM token)	No	Push notification delivery
Last activity time	Yes	Online status

We do not collect: location, device address book contacts, health data, SMS, browsing history, music library, or any data not listed in the table.

3.Where data goes

Data is stored on GoMsg servers (global server — gomsg.pro).

Google Firebase Cloud Messaging — processes the device identifier (FCM token) and push notification text (title and short message preview) solely to deliver notifications. Firebase acts as a service provider and does not use the data for its own purposes.
AI providers (e.g. Groq) — if you use AI assistant features (support widget, AI bots), the messages you send there are passed to the respective provider to generate a reply.
Public radio directory (radio-browser.info) — when using the radio feature the app sends anonymous catalog requests not tied to your account.

We do not sell data and do not share it with ad networks or data brokers.

4.Storage and security

Retention — for as long as your account exists. Passwords are stored only as irreversible Argon2 hashes. Database access is restricted to the server administrator.

Data transfer between the app and the server uses an encrypted connection (TLS/HTTPS).

5.Your rights

Access — you may request information about your data.
Deletion — you can delete your account and all related data by following the instructions at gomsg.pro/en/delete-account. Local data (device cache) is removed by signing out and uninstalling the app.
Withdrawing consent — denying push notifications disables FCM token use; uninstalling the app stops all client-side data processing.

Request processing time — up to 72 hours.

6.Children

The app is not intended for children under 13 and does not knowingly collect children's data.

7.Policy changes

We may update this policy. Material changes will be reflected by the updated date at the top of this page.

8.Contact

Privacy questions and deletion requests: wosco@wosco.pro