← Back to home

Privacy Policy

Revised on 4 September 2026.

1. Who processes your data

TomoChat is a messenger for Android, Windows and the web. User data is processed by the TomoChat team. For any question about personal data, including withdrawing your consent to its processing, write to support@tomochat.ru. By using the app you agree to this policy.

2. What data we collect

  • Your phone number — it is how you sign in and how people you know find you
  • Nickname, display name, avatar and profile description — whatever you entered yourself
  • Messages, attachments, voice messages and video circles — to deliver them to the recipient
  • Your contact list, community memberships and privacy settings
  • Device data: platform, app version and the push notification token
  • The public part of your passkeys and the list of active sessions, including desktop sign-ins
  • Technical logs: connection time, IP address, error texts
  • Your Steam profile, favourite games and achievements — only if you linked a Steam account yourself
  • Phone numbers from your device address book — only when you start the search for people you know

3. Why we need it

  • To deliver messages and notifications
  • To restore access to your account and protect it from takeover
  • To find people you know among our users, if you asked us to
  • To show your Steam showcase in your profile, if you enabled it
  • To investigate failures and make the app more stable
  • To review reports and act on rule violations

4. Access to device features

The app asks for a permission at the moment it is actually needed. If you decline, the app keeps working — only that particular feature will be unavailable.

  • Notifications — alerts about new messages
  • Microphone — voice messages and video circles
  • Camera — video circles, taking photos for a chat and scanning QR codes
  • Photos and media — picking attachments and an avatar
  • Contacts — finding people you know who are already on TomoChat; we never read the address book in the background or upload it without an action from you

5. What we do not do

  • We show no ads and pass no data to ad networks
  • We do not sell data to third parties
  • We never ask for payment or identity document details
  • We do not read your address book, gallery or microphone in the background
  • We do not collect data about your activity in other apps

6. How we protect your data

Connections to our servers are always protected with TLS. Server access is restricted and passwords are stored only as irreversible hashes. There is no end-to-end encryption: messages are stored on our servers and we technically do have access to them.

7. Who we share data with

We share as little as possible, and only with those the app cannot work without:

  • Google (Firebase Cloud Messaging) — delivers push notifications on Android; it receives the device token and the notification text
  • Your mobile operator — delivers the SMS or call with the sign-in confirmation code
  • Valve (Steam) — gives us your profile and game list if you linked a Steam account
  • Authorised state bodies — to the extent and in the cases directly required by law

8. Where and how long we keep it

  • Servers are located in the Russian Federation
  • Profile, contacts and messages — for as long as the account exists
  • Technical logs — for the limited time needed to investigate failures, after which they are deleted
  • The local message database on your device — until you sign out or uninstall the app

9. Your rights

  • View and change your profile data — Settings → Account
  • Choose who sees your phone number, profile and status — Settings → Privacy
  • Turn off notifications, the Steam link and passkeys at any time
  • Delete your account together with the associated data — Settings → Account → Delete account
  • Request information about the processing of your data or withdraw your consent — by writing to support@tomochat.ru

10. Deleting your account

Deletion is available right in the app and needs no request to support. Along with the account we delete your profile, contacts, linked accounts and the messages you sent. Copies of your conversations stay on your correspondents' devices — that is how any messenger works.

11. Age restrictions

The app is intended for users aged 12 and over. If you are younger, you may use TomoChat only with the consent of a parent or legal guardian.

12. Changes to this policy

The policy may change along with the app. The current version is always available on this page; the date at the top shows when it was last updated. We will announce material changes in the app.