Privacy Policy

Last updated: August 22, 2026

Overview

Kithra is an encrypted async video messaging app. It is designed so the relay server cannot read the contents of your videos.

Data we process

Kithra may process account identifiers, device identifiers, public encryption and signing keys, authentication/session tokens, contact and invite relationship metadata, message routing and status metadata, encrypted video blobs waiting for delivery, block and report metadata (including a report reason and app-generated details), IP addresses, and basic server logs needed to operate and secure the relay.

Video content

Kithra encrypts video messages on your device before upload. The relay receives and stores each video payload only as an encrypted blob; it does not receive plaintext video. Recipients decrypt videos on their own devices.

What we do not do

Kithra does not sell personal data, does not use advertising SDKs, and does not use third-party analytics or tracking SDKs.

Retention

The relay gives each undelivered encrypted blob an expiration time, with a current default of 7 days. Cleanup runs when the relay starts and then hourly. It deletes expired ciphertext and its message record; if storage deletion fails, the relay keeps a retryable record and tries again during a later cleanup cycle. When a recipient verifies and caches a message, the app acknowledges delivery and the relay deletes its encrypted blob before confirming success. Message metadata may remain on the relay after delivery so the app can show conversation history, delivery status, and contact state.

Account deletion

You can request account deletion in the app from Settings. Account deletion removes the relay account, device and session records, contacts, message metadata, and pending encrypted relay blobs associated with the account. If the relay cannot delete an associated encrypted blob, it keeps the account and ownership records so the authenticated deletion request can be retried safely. After relay deletion succeeds, the app clears its relay session, local encrypted media, verification records, replay receipts, and device keys from that device. If local cleanup cannot finish, Kithra reports the incomplete cleanup and requires a retry instead of creating replacement keys over the remaining state. Account deletion does not remove copies of messages already downloaded to another recipient's device. Metadata-only reports submitted by the deleting account are removed. A report submitted by another user about the deleted account may remain, but the relay removes the deleted account's identifier from that report.

Contact

Email support@jqinnovation.com for support. Report security vulnerabilities privately to security@jqinnovation.com.