Privacy Policy

Unlike traditional messaging apps, GoZypp follows a strict Non-Identification Policy:

• No Phone Numbers: We do not require or store your mobile number.
• No Emails: No email address is needed for registration or use.
• No Real Names: You are identified only by a self-generated username (GoZypp ID).
• No Contact List Uploads: We do not scan or upload your phone’s contact list to our servers.

For users located in the European Economic Area (EEA), GoZypp operates on a "Privacy-by-Design" and "Data Minimization" principle in strict alignment with the General Data Protection Regulation (GDPR). Because we do not collect, store, or process any Personal Data (as defined by GDPR), our technical infrastructure holds no data fields to process.

Data Subject Rights: GoZypp fully supports your rights under the GDPR. However, because we do not hold, link, or store personal identifiers, biometric data, or communication logs, requests for access, rectification, erasure ("right to be forgotten"), or data portability cannot be linked to any physical identity. Your data sovereignty is entirely managed locally on your physical device hardware.

3.1 End-to-End Encryption (E2EE): All messages and calls are encrypted using the Signal Protocol. Only the intended recipient can decrypt the content.

3.2 DuoKey Burning: Decryption keys are destroyed immediately after use. We do not hold copies of your keys.

3.3 On-Device Security & "My Vault" Cloud Encryption: Your chat history and local app data are secured using SQLCipher. Furthermore, all items stored within the "My Vault" feature—including passwords, photos, videos, and professional documents—are encrypted end-to-end before leaving your device and are securely hosted on our cloud relays strictly for single-device backup and account migration purposes. GoZypp does not support or facilitate simultaneous multi-device active sessions. Because we operate a strict Zero-Knowledge architecture and do not hold your private keys, your Vault contents remain completely unreadable on our servers and can only be unlocked on a new authorized phone using your unique Recovery Code.

We minimize the generation of metadata. We do not track:

• Who you are talking to.
• When you are messaging.
• Your IP address.
• Physical location.

To maintain absolute privacy, GoZypp operates a strict firewall between your billing identity and your communication identity.

5.1 15-Day Trial Conversion: If you are on the 15-Day Free Trial, no billing data is used for communication identity tracking. Upon expiration of the trial, processing occurs strictly through the segregated channels below.

5.2 In-App Purchases (Apple/Google): If you subscribe through the Apple App Store or Google Play Store, your financial transaction is handled entirely by the respective platform. GoZypp only receives an anonymous, cryptographic token from Apple/Google confirming that a subscription is active. We never see your credit card details, name, or billing address.

5.3 Direct External Purchases: If you subscribe directly through the Sal Technology website portal via corporate invoice, credit card gateways, or cryptographic payments, your financial records are processed by secure, PCI-DSS compliant third-party payment processors. This financial metadata is legally processed for accounting, tax compliance, and anti-money laundering (AML) obligations in Singapore, and is strictly isolated from your GoZypp communication username (GoZypp ID) and system routing.

5.4 Privacy of Refund Claim Information: In the event that you submit a formal refund request via our official email channel as outlined in Section 5.6 of the Terms of Service, you explicitly acknowledge that you are voluntarily providing our billing department with a link between your transaction identity (billing correspondence, emails, or receipts) and your self-generated GoZypp ID as required by Section 5.6.3 in the Terms of Service.

The Company processes this data strictly for financial reconciliation, tax accounting, and verification purposes. While this information remains administratively isolated from our active network routing servers, it will exist within our billing support records.

Consequently, Sal Technology Pte. Ltd. will comply with valid, compulsory legal orders, statutory demands, or warrants from Singapore authorities. If a legal directive legally compels our financial department to disclose our refund communication records, the Company will comply with its statutory obligations under Singapore law. You acknowledge that submitting a refund claim creates a traceable record of your username (GoZypp ID) tied to your billing email within our financial support archives, though it still does not grant the Company or any authority the technical capability to decrypt or access your end-to-end encrypted chat communications.

We do not sell, rent, or trade your data. Since we do not collect personal identifiers, there is no data to share with advertisers, data brokers, or third parties.

GoZypp complies with valid legal orders from Singapore law enforcement under the Online Criminal Harms Act (OCHA).

7.1 Technical Limitations: Due to our Zero-Knowledge architecture and hardware-backed encryption, we do not possess the technical capability to decrypt communications, logs, or provide personal identifiers (such as phone numbers or NRIC).

7.2 Centralized Restriction: In the event of a valid legal directive (e.g., an OCHA Account Restriction Direction), GoZypp can only enforce account suspension or restrict access to the network from our centralized administrative portal based on the username (GoZypp ID). We can only confirm the existence of a username (GoZypp ID) and its account creation date.

GoZypp does not use cookies, tracking pixels, or third-party analytics (such as Google Analytics). We do not profile user behavior or monitor app engagement patterns.

GoZypp stores your encrypted chat history on our secure cloud relays for a maximum rolling period of 90 days to facilitate secure delivery and account recovery during device migration. All in-transit and cached messages are fully encrypted end-to-end. Upon reaching the 90-day threshold, the encrypted data is automatically and permanently purged from our server infrastructure, regardless of delivery status.

Under the Personal Data Protection Act (PDPA) of Singapore, you retain complete sovereignty over your data. Because we do not store your Password or Recovery Code, if you lose them, GoZypp cannot recover your account or data. This is a security measure to ensure no one—including us—can reset your security parameters.

GoZypp is not intended for users under the age of 18. We do not knowingly collect information from children. If we discover that a user under 18 has created an account, we will take steps to terminate the account.

This Privacy Policy is governed by the laws of the Republic of Singapore. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of Singapore.

We may update this policy to reflect new security features. All updates will be notified within the app. Continuous use of the app constitutes acceptance of the updated policy.

For any privacy-related inquiries or to exercise your data sovereignty rights, please contact our legal and data protection team at: