Last updated: 20 October 2026
Iris Chat does not require a phone number or email address. Your identity starts with a secret key generated on your device and a public user ID. Your secret key and readable message history stay on your devices. Linked devices receive the information needed to use your identity and sync conversations through encrypted connections.
Direct and group messages are end-to-end encrypted. Message servers carry and may retain encrypted messages, but do not receive the keys needed to read them. Photos, videos, and files shared in private chats are encrypted before upload; their download links and decryption keys are shared inside the encrypted conversation. File servers may retain the encrypted files.
Your recipients and linked devices can read and copy the content you share with them. Anyone you give a file's decryption link to can read that file. If you chat with an agent, any service the agent forwards your messages to has its own privacy practices.
Iris Chat does not access your phone’s address book.
Your public user ID and the public IDs of linked devices are published to message servers. If you add a profile name, picture, or bio, it is published with your user ID. Profile pictures are publicly readable through the link in your profile; they are not private chat attachments.
If you use public follows, the people you follow are published with your user ID. This public list is separate from your private chats. Public profiles and follow lists can be read, copied, and retained by other people and services.
When you enable mobile notifications, the notification service receives your device's push token and filters identifying the message or call events your device needs. Registration is authenticated with your user ID, so the service can associate that ID with the token and filters. It forwards encrypted message events and call notifications without receiving your private message decryption keys.
Apple or Google also processes push delivery through its notification service. Message servers, file servers, notification services, and directly connected peers can observe connection information such as IP addresses, request times, and traffic size. Encryption does not hide all connection or delivery metadata. These services have their own retention policies.
Iris Chat does not include third-party analytics, advertising SDKs, or behavioural tracking. Public profile information and notification identifiers support app functionality; they are not used for advertising or tracking across other companies' apps and websites.
If you contact us or send a report, we receive your contact details and the information you choose to include. The iOS report action opens an email draft with the reported user's name and user ID and your app version; it does not automatically attach your chat history. Review what you send and never include your secret key.
You can choose your message servers, manage notification permissions, remove linked devices, and erase local data. Deleting local data does not erase copies held by recipients, other devices, or network services. Where supported, Delete profile publishes a request to clear your public profile before removing local data; it cannot guarantee removal of previously copied information. Contact the operator of a service about information it retains.
Iris Chat is provided by Sirius Business Oy. Privacy questions: irismessenger@pm.me