Privacy
Last updated 13 November 2026. This policy explains what CitChat stores, why we store it, and how to get it deleted. CitChat is operated by PT. Jaring Rezeki Halal, Indonesia.
Your account: a username, an optional email address (only if you give one), and a bcrypt hash of your password - never the password itself. If you turn on face sign-in, the short selfie video you record and a numeric face template derived from it. Whatever you post: messages, photos, videos, contacts, labels and place tags. For CitChat Center accounts: wallet balances, voucher codes and payment records. Basic technical logs such as IP address and user agent.
Only to run the service you signed up for - delivering your messages, rendering your feeds, securing your account and processing the payments you authorise. We do not sell your personal data and we do not run advertising trackers.
Traffic is encrypted in transit. Passwords are stored as bcrypt hashes, and the face template is a numeric vector rather than a copy of your face. A conversation can be end-to-end encrypted with AES-256-GCM, in which case the server never holds the conversation key and cannot read the messages. Your wallet sits behind a 6-digit PIN, and payment QR codes are single-use and expire after five minutes.
Your content stays on our servers while your account exists. You can delete individual messages whenever you want, or ask us to delete the whole account. We action account-deletion requests within 30 days, and the face video and face template are removed with the account.
You can view and correct your profile data, export a copy of your data, turn off face sign-in at any time, and request deletion. Account recovery is available through a one-time email link or a face check inside the app.
CitChat is rated for users aged 12 and up and is not directed at children under 13. We do not knowingly collect data from children.