Privacy Policy

0. Technical Philosophy

Entropy is designed for Total User Privacy. Unlike platforms where privacy is an afterthought, Entropy enforces it through architecture. Our systems are designed to be incapable of accessing or storing your data.

1. Zero-Knowledge Data Collection

Entropy does not utilize centralized accounts. We have eliminated the following vectors of data collection entirely:

  • No Identity Linking: We do not require phone numbers, email addresses, or any personal identifiers. Your identity is a unique, cryptographically derived 256-bit hash of your public key.
  • Minimal Metadata: The messaging relay is configured for zero-log operations. While routing hashes and encrypted key-bundles are transiently cached to enable asynchronous delivery, IP addresses are never logged or associated with your identity.
  • Group Privacy: Entropy logic is zero-log. Groups are handled via client-side fan-out, ensuring the relay never identifies group structures, membership lists, or conversation metadata.

2. Local Storage & Encryption

All conversation history, media, and cryptographic keys are stored exclusively on your local device. This data is protected by a high-entropy vault utilizing:

  • SQLCipher (AES-256): For military-grade encryption of your local database, ensuring your history remains private even if the device is lost.
  • Argon2id: The industry-winning memory-hard function used for secure password-based key derivation (KDF) to protect the master vault.

3. Network Anonymity

To prevent network-level triangulation, Entropy normalizes all packets to 1400 bytes. For users in high-risk environments, we provide native, first-class support for SOCKS5 proxies and direct Tor circuit integration, ensuring that your IP remains masked and your ISP cannot determine your destination.

4. Compliance & Legal Requests

As a decentralized software provider, we do not possess any user data to provide to third parties, including government agencies or law enforcement. We cannot "backdoor" the encryption or reset user passwords, as we never hold the underlying keys.