Hush

🛡️ 1. Privacy Policy

At Hush, privacy is not an option or an afterthought—it is the foundational core of our architecture. We operate on a strict Zero-Knowledge Architecture.

End-to-End Encryption (E2EE)

All one-on-one communications in Hush are end-to-end encrypted using state-of-the-art cryptographic primitives: X25519 (Curve25519 ECDH key agreement) and ChaCha20-Poly1305 AEAD symmetric authenticated cipher. Private cryptographic keys never leave your device.

60-Second Ephemeral Lifecycle

All exchanged messages strictly self-destruct 60 seconds after transmission. Message content is permanently purged from active device memory and automatically expired and erased from our backend database.

Zero Data Collection

• No Chat History: We do not store conversation logs.
• No Search History: Searches by public ID are never recorded.
• No Plaintext Passwords: Passwords are authenticated securely via cryptographic hashing.
• No Tracking / No Third-Party Ads: We do not use advertising trackers, analytics SDKs, or data brokers.

Push Notifications

Hush utilizes Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM) strictly to alert you of new incoming messages. Notification payloads display only the sender's public handle (e.g. @username) and never contain encrypted message ciphertext.

📜 2. Terms of Service & End User License Agreement (EULA)

By downloading, installing, or using Hush, you agree to be bound by this End User License Agreement (EULA), which complies with Apple App Store Review Guideline 1.2 (Safety / User-Generated Content).

User Safety & Moderation Controls

Hush provides direct, built-in safety controls accessible in all active screens:

• In-App User Blocking: You can block any user at any time with a single tap. Blocking a user instantly closes active sessions and prevents them from initiating future contact.
• In-App User Reporting: You can report any user for harassment, spam, or inappropriate behavior directly via the report flag in the chat header or profile view. Our safety team reviews all reports promptly.

Account Responsibility

You are responsible for maintaining the confidentiality of your chosen public ID and password. Because Hush is built on Zero-Knowledge architecture, lost credentials cannot be recovered via email.

🗑️ 3. In-App Account & Data Deletion (Apple Guideline 5.1.1)

In full compliance with Apple Review Guideline 5.1.1(v), Hush provides a simple, direct, and immediate in-app account deletion mechanism.

How to delete your account:

1. Open the Hush application on your device.
2. Open the side navigation drawer and tap Account.
3. Scroll down and tap Delete Account.
4. Type easy into the confirmation field and tap Delete.

What happens when you delete your account:

• Your profile and public ID are immediately wiped from our servers.
• All cryptographic keypairs and local tokens stored in Keychain / Secure Storage are purged.
• All active sessions, friendships, and blocked records are permanently deleted.

📬 4. Contact & Support

If you have any questions, feedback, or need to report a critical security concern, please contact our support team:

Developer: Hush Team
Email Support: huseennaser9@gmail.com
GitHub Repository: github.com/restahlna-design/huhuchat