Privacy policy

Veto messenger (iOS and Android apps, and the web app) · Last updated 20 October 2026

In short: Veto has no accounts, no phone numbers, no e-mail sign-up, no ads, no analytics and no tracking. Your messages are end-to-end encrypted on your device. We cannot read them, and we do not keep a copy of your contacts or conversations.

Who we are

Veto is published by SLASH DIGITAL LAB SAS, Carrera 8A # 97-07, Bogotá, Colombia. It is responsible for the limited processing described here. For questions about this policy or your data, write to support@martialtech.fr.

What stays on your device

Your identity keys, contacts, messages and settings are created and stored on your device, encrypted under your passcode. In the mobile apps they are also encrypted under a key kept in the phone's secure key store (iOS Keychain or Android Keystore). We never receive them, and they are excluded from cloud backups.

What the delivery network sees

Messages travel through relays: independent public Nostr relays and a relay we operate. Each message is an end-to-end encrypted, padded envelope, signed with a single-use key. A relay can see:

Visible to relays	Not visible to relays
the recipient's inbox tag (derived from their public key), the time, the approximate size of the envelope, and the network (IP) address of the device that connects	who sent it, the conversation, the content or type of message, your name, your contacts

Envelopes carry a 30-day expiry. Our relay, and the web app's last-resort encrypted store (hosted with Supabase), delete them after that period. Our server keeps no access logs, and our relay software does not log IP addresses. Independent public relays are run by their own operators, under their own policies.

Veto Echo (demo contact)

When we offer it, Veto Echo is a contact we run so that you can try Veto on your own: it repeats what you send it. Like any contact, it can read the messages you send it, because it has to in order to answer. It uses them for nothing else, and it deletes its copy of the chat an hour after your last message. You don't have to add it.

Camera, microphone and photos

The mobile apps use the camera to scan a contact's invite QR code and to take a photo you choose to send. QR codes are decoded on your device: Apple's Vision framework on iOS, Google's ML Kit on Android. Our Android build disables ML Kit's usage reporting to Google. The microphone is used only while you record a voice note. Photos and files are chosen with your phone's own picker, so the app only sees the items you pick, not your library.

Attachments

Photos, documents and voice notes are encrypted on your device before they leave it. Small ones travel inside the encrypted message. Larger ones are uploaded as encrypted pieces to the store on our server, which cannot read them and deletes them after 30 days. The key to open them is only inside the end-to-end encrypted message.

Notifications

If you allow them, the app shows notifications for messages that arrive while it runs in the background. They are created on your phone by the app itself: we run no push service and receive no device token. By default a notification only says "New message", without a name or text. You can turn on names and text in Settings → Notifications. Then your phone's lock screen settings decide what shows while it is locked.

Optional features (web app)

GIF search sends the words you search for, through our server, to Tenor (Google). Don't use it if you don't want that.
Direct connections are only opened with contacts whose safety number you have verified. They reveal your network address to that contact.

The web app, our relay and the attachment store run on a server we operate. Our pages and apps contain no third-party analytics or advertising code.

Reports and support e-mails

If you report someone, the app blocks them on your device and opens an e-mail to us. We only receive what you choose to send in that e-mail: by default their name, their public identity key and the messages you include. We use it only to handle your report or request, on the basis of our legitimate interest in keeping Veto safe. We keep it no longer than needed for that, or than the law requires. We share it only when the law obliges us to.

Deleting your data

In the mobile apps, use Settings → Delete everything on this device, or uninstall the app. In the web app, use Forgot passcode? → Erase this device & start over on the lock screen, or clear the site's data. There is no account on our servers to delete. To have a support e-mail deleted, write to us. See Support for step-by-step help.

Children

Veto is not directed to children under 13, and the Terms of use require users to be at least that age, or older where local law requires it.

Your rights

Because we hold no personal data linked to you beyond any e-mail you send us, there is usually nothing for us to access, correct or delete on our side. Your data is under your control, on your device. For any request or complaint, write to support@martialtech.fr. You may also contact a data-protection authority: in Colombia, the Superintendencia de Industria y Comercio (SIC); in the European Union, the authority of the country where you live (in France, the CNIL).

Security status

We describe the protocol's guarantees and limits openly in the project documentation, and we never claim it is unbreakable.

Changes

When the policy changes, we will update this page and the date above.

Support · Terms of use · Veto