Privacy Policy

HSX SilentWire Pro - Mobile is an end-to-end encrypted messenger. Your messages, files and calls are encrypted on your phone and can only be read by the people you talk to. Our relay passes encrypted data between phones and deletes it as soon as it is delivered. This page says exactly what the relay and our service providers can see.

Effective date: 7 Oct 2026 · Version: 1.1.0 · Publisher: Hasnain Studio X · Developer: Hasnain Butt Akhtar · Applies to: HSX SilentWire Pro - Mobile for Android

1. Overview

Message text, files, voice notes and call audio and video are end-to-end encrypted. We cannot read them.
There is no phone number, email or password. Your identity is a key pair created on your phone.
The relay keeps an encrypted message only until the recipient's phone collects it, then deletes it.
To deliver messages the relay necessarily sees which identities exchange messages and when. Section 3 lists everything it holds.
No ads, no analytics and no tracking. We do not sell or share data.

2. Data Stored on Your Phone

Messages and Contacts

Your conversations, contacts, groups and settings are kept in a database encrypted with a key held in Android's secure key storage.

Files

Photos, files and voice notes you send or receive are stored encrypted on the phone and decrypted only while you open them.

Your Keys

Your identity keys are created on the phone and kept in Android's secure key storage. They leave the phone only inside an encrypted backup you make, or encrypted when you move your account to a new phone.

Pro State

Whether Pro was validated, with its Google Play purchase token, kept in encrypted storage.

Deleting your account, or uninstalling the app, removes everything stored on the phone.

3. Data Our Relay Holds

Public Keys

Your public identity keys and the fingerprint derived from them, so others can encrypt to you and the relay can check that requests really come from you. Public keys are not secret.

Messages in Transit

Each encrypted message waits only until the recipient's phone collects it, then it is deleted. Alongside it the relay sees the sender and recipient fingerprints, the time and the size. A message nobody collects is deleted after 30 days.

Files in Transit

Encrypted files wait until downloaded and are deleted after delivery or after 30 days; a move-account transfer after 24 hours.

Username (Optional)

If you claim a username, it is stored with your display name and public keys so people can find you. You can release it at any time.

Notification Token

A Firebase Cloud Messaging token so your phone can be woken for new messages and calls.

Safety Data

Short lived anti replay and rate limit records (minutes to a day). Reports you send, or that others send about you, are kept for up to 12 months.

Our relay runs on Supabase, which keeps short operational logs that include IP addresses.

4. Service Providers

Supabase

Hosts the relay and its database (section 3).

Google Firebase Cloud Messaging

Delivers wake up notifications. A notification never contains message text or names: messages say "New encrypted message" and a call carries only the caller's fingerprint and a call id. Google sees your token and IP address.

Call Connection Servers

Calls are end-to-end encrypted (DTLS-SRTP), and the keys travel inside encrypted messages. To connect, your phone contacts Google STUN servers, which see your IP address, and may route encrypted call traffic through a Cloudflare TURN relay, which sees IP addresses and the amount of traffic but not content. When a direct connection is possible, the other person's phone sees your IP address.

Google ML Kit

Translation (Pro) runs on your phone; message text is never sent. Language models are downloaded from Google the first time you use a language.

Google Play and Google Fonts

Google Play handles the Pro purchase; the purchase token is checked by our verification service. The app's typefaces download from Google Fonts once and are cached.

None of these providers receives message content.

5. App Permissions

Camera

Scanning contact QR codes, taking photos to send and video calls. Asked when first needed.

Microphone

Voice notes and calls. Asked when first needed.

Notifications and Full Screen Calls

New message notifications and the full screen incoming call screen.

Foreground Services

Keep a call (microphone, camera) or screen sharing running while the app is in the background, only during the call.

Bluetooth

Routing call audio to a Bluetooth headset, asked before you pick one.

Biometrics

Optional app lock. Android handles the check; the app only learns pass or fail.

Internet, Network State, Wake Lock, Vibration

Connecting to the relay, keeping a call alive and alerting you.

The app does not read your contacts, location, call log or photo library. Photos and files you send are picked with Android's pickers.

6. Retention and Deletion

Messages and files on the relay: deleted on delivery, at most 30 days.
Delete account (Settings) removes your keys, username, token, queued messages and files from the relay, then erases the phone.
Without the app, see hasnainstudiox.com/delete/SilentWire.html.
Messages already delivered live on the devices of the people you talked to; we cannot delete those.

7. Google Play Purchases

Pro is a one time purchase handled entirely by Google Play. Card details never reach the app or us. On start the app asks Google Play which purchases the account owns, so a refunded purchase is removed. The purchase token, product id and package name are sent to our verification service only to confirm a purchase.

8. Children's Privacy

HSX SilentWire Pro - Mobile is not directed to children under 13 and we do not knowingly collect data from them. The terms of use apply to everyone who creates an identity.

9. Policy Changes

This policy applies to HSX SilentWire Pro - Mobile 1.1.0 and later, effective 7 Oct 2026. When the app's data behaviour changes, we update this page, its version and its effective date in the same release. Terms of use: hasnainstudiox.com/terms/SilentWireTerms.html.

10. Copyright and Tamper Protection

HSX SilentWire Pro - Mobile, its source code, design, brand identity, and all associated assets are protected by copyright. Reverse engineering, repackaging, decompiling, modifying signed builds, or redistributing the APK or AAB without written authorisation is strictly prohibited and may result in legal action under applicable copyright and computer misuse legislation.

Only builds published to Google Play under the publisher account "Hasnain Butt Akhtar / Hasnain Studio X" are genuine. Side loaded or third party builds are unauthorised and unsupported.

11. Contact

For privacy questions, contact:
Hasnain Butt Akhtar, Hasnain Studio X
[email protected]
https://hasnainstudiox.com