1. Scope
This Privacy Policy applies to the EasyChat iOS app, notification service extension, share extension, and services, websites, and support channels operated by HMO Logistics LLC and directly associated with EasyChat (collectively, the “Service”). The Service is offered outside mainland China.
This Policy does not apply to third-party websites you access through EasyChat, information independently processed by other users, or information independently processed by Apple or other third parties under their own policies.
2. Controller and contact information
The operator and controller of personal information for the Service is:
HMO Logistics LLC
1515 Market St, Ste 1200
Philadelphia, PA 19102-1932
United States
Privacy and support email:
ivyb@hmolog.homes
We do not currently provide telephone support. For account security, contact us through the in-app support entry or the email address above.
3. Information we process
Account and identity
Random or service-generated account identifiers, EasyChat ID, device registration information, authentication credentials, recovery-code status, and account security status. You should retain your recovery code; support will never ask for the complete code.
Optional recovery channels
When available and voluntarily enabled, we process a phone number or email address for verification, account recovery, or security notifications. Some binding channels may not yet be available in the current version.
Profile and social information
Your selected display name, avatar, username, bio, group information, contact cards, stories, and information you choose to publish or send to other users.
Communications
Messages, voice notes, photos, video, files, locations, calls, and other attachments are end-to-end encrypted before transmission. Servers may temporarily hold encrypted content and attachments to complete delivery.
Contacts
With permission, the app reads contacts on-device to display or invite contacts and discover registered users. We do not store your complete address book in plaintext on our servers. Contact discovery may process protected representations of numbers or other minimum query data.
Device and network data
IP address, device and OS type, app version, language and time zone, push token, Bundle ID, connection times, delivery state, and anti-abuse or security events needed to operate the Service.
Diagnostics and support
Only when you submit or export them, we process issue descriptions, device model, iOS and app versions, locale, call-quality feedback, and debug logs. Production self-hosted mode does not automatically upload logs to the upstream debug-log service.
Purchases and subscriptions
If Apple-managed purchases or subscriptions are enabled in the future, we receive product, transaction-status, and receipt-validation information. Apple processes full payment-card details; we do not store them.
No advertising use: We do not sell personal information, share it for cross-context behavioral advertising, use third-party ad networks, or include third-party tracking or ad SDKs such as Firebase Analytics, Crashlytics, or Mixpanel in the current iOS project.
4. How we use information
- Create, verify, secure, and recover accounts; connect devices; and send necessary service notifications.
- Deliver messages and attachments; connect voice or video calls; synchronize profile information; and provide group, story, sharing, and backup features.
- Prevent spam, fraud, abuse, unauthorized access, and other security threats.
- Diagnose failures, answer support requests, and improve reliability and call quality; voluntarily submitted logs are used only for relevant support and improvement.
- Comply with applicable law and valid legal process, and protect the rights and safety of users, HMO Logistics LLC, or the public.
In the EEA, UK, and similar jurisdictions, our legal bases may include performance of our contract with you, our legitimate interests, your consent, and compliance with legal obligations. You may withdraw consent-based permissions at any time without affecting earlier lawful processing.
5. End-to-end encryption and content visibility
EasyChat uses end-to-end encryption to protect supported private chats, group chats, and calls so content is intended to be readable or audible only by senders and intended recipients. Message history is primarily stored on your devices. Offline messages may remain queued in encrypted form, and attachments may remain encrypted in content-delivery or storage systems.
End-to-end encryption cannot prevent a recipient from taking a screenshot, copying, forwarding, or separately saving content, and it cannot protect an unlocked or compromised device. Keep your device, recovery code, and credentials secure.
6. Device permissions
| Permission or capability | Purpose | Your control |
|---|
| Contacts | Display and invite contacts and discover registered users. | Grant or revoke in iOS Settings. You can still connect through an EasyChat ID, username, or link. |
| Camera and photos | Capture, choose, send, or save media; scan QR codes; and set an avatar. | Requested when a feature needs it; revocable in iOS Settings. |
| Microphone and audio | Voice messages, voice/video calls, and media playback. | Requested when a feature needs it; revocable in iOS Settings. |
| Location | Share your current location or a place when you choose. | Granted while using the app; a shared location is treated as message content you chose to send. |
| Notifications and APNs | Receive calls, messages, and security notifications. | Apple creates the push token; notifications can be disabled in iOS Settings. |
| Face ID / device authentication | Protect the app or sensitive actions on-device. | iOS performs verification; we do not receive or store your biometric template. |
| Local network | Discover a nearby device only when you initiate direct account transfer. | Revocable in iOS Settings. |
| Apple Music | Play related media attachments when you use that functionality. | Used only when needed and authorized through Apple. |
7. Sharing, service providers, and legal disclosure
We share information or appoint processors only as needed to provide the Service:
- Apple: App Store distribution, Apple Push Notification service, encrypted credential synchronization through iCloud, device authentication, maps, and system media capabilities. Apple processes relevant data under its own terms.
- Infrastructure providers: Hosting, bandwidth, encrypted attachment storage, call relay, email, and security providers may process minimum necessary data only on our instructions and under contractual confidentiality and security obligations.
- Other users: Profile information and content you send, publish, or share after joining a group is made available to recipients you select or permit.
- Law and safety: We may disclose limited information when we believe in good faith it is necessary to comply with valid legal process, protect safety, investigate abuse, or preserve Service integrity. We cannot provide plaintext for end-to-end encrypted content we cannot decrypt.
- Business transactions: Information may transfer as part of a merger, financing, reorganization, or asset transfer, subject to continued protection under this Policy or equivalent obligations.
Providers processing personal information for us must provide protection equivalent to this Policy and applicable law. We do not sell personal information or share it for targeted advertising.
8. Retention and deletion
- Account information: Kept while the account is active, then deleted or de-identified from active systems after account deletion, except limited records required for law, security, or dispute resolution.
- Encrypted messages: Pending messages are generally removed from the queue after delivery or expiration. Message history is primarily held on user devices. Disappearing-message timers are applied by participating devices.
- Encrypted attachments, profile data, and backups: Kept while needed for the feature. After deletion, they enter cleanup processes. Residual backup copies are ordinarily overwritten or removed within up to 90 days.
- Network and security logs: Ordinarily kept for no more than 90 days, unless longer retention is necessary to investigate an incident, prevent fraud, or meet a legal obligation.
- Support records: Ordinarily kept for up to 24 months after closure for recurring issues, quality review, and legal obligations. You may request earlier deletion when the record is no longer needed.
Delete your account in the app
Open Settings → Account & Security → Delete Account, then confirm. EasyChat sends an account-deletion request to the service and clears local app data. Deletion normally begins immediately and active-system cleanup is completed within no more than 30 days; residual backups follow the schedule above. Deleting the app alone does not delete the server-side account.
Messages already stored on recipients’ devices or content another user has re-shared may remain under that user’s control. Information required by law is deleted when the required period expires.
9. Your privacy rights
Depending on local law, you may have rights to know, access, correct, delete, or receive a copy of personal information; restrict or object to processing; withdraw consent; and complain to a local data-protection authority. California residents may also ask for the categories of personal information collected, used, and disclosed in the preceding 12 months. We do not sell or share personal information for cross-context behavioral advertising, so no sale/share opt-out is required.
Manage profile information, permissions, and account deletion in the app, or email ivyb@hmolog.homes with the subject “EasyChat Privacy Request” and the request type. We may verify your identity through a registered device, account credentials, or another reasonable method. We respond within the time required by applicable law and, where GDPR applies, generally within one month.
10. International processing and transfers
HMO Logistics LLC is located in the United States. To serve users outside mainland China, information may be processed in the United States and in other countries where we or our service providers operate. Their data-protection rules may differ from those in your jurisdiction.
Where required, we use contractual protections, data minimization, encryption, and other lawful transfer mechanisms while preserving your applicable rights.
11. Security
We use measures including end-to-end encryption, transport encryption, an encrypted on-device database, access controls, key separation, log redaction, and least-privilege access. No system can guarantee absolute security. If an incident may affect you, we will respond and notify as required by applicable law.
Never send anyone your complete recovery code, verification code, or device-unlock credential. EasyChat support will not initiate a chat asking for these secrets.
12. Age requirement
EasyChat is only for users who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information to us, contact us so we can verify the report and delete the information or take other appropriate action.
13. Changes to this Policy
We may update this Policy for product, technical, legal, or operational changes. We will provide notice of material changes through the app, website, or another reasonable method and update the effective date above. Where law requires consent, we will request it separately.
