Effective October 23, 2026

Privacy policy

O2 (oxy messenger) is built to know as little about you as possible. Your chats are encrypted on your devices — neither the nodes nor we can read them.

1. Who we are

O2 is a messenger for Android, Windows and the web, website o2msg.space. For data questions, message @founder in the app.

2. What we do not collect

• your phone number, email or address book;
• the plain text of your chats, photos, voice messages and files;
• advertising identifiers, analytics or trackers.

3. What is stored and where

On your devices

Account keys (derived from your password and never sent to the server), chats, contacts, groups and settings — all encrypted.

On network nodes

• Encrypted envelopes — until the recipient picks them up, but no longer than 14 days. A node only sees the recipient (a key identifier) and the size.
• Encrypted media chunks (photos, videos, files) so the recipient can download them. Only the people in the chat hold the key.
• The public nickname registry — nickname and public key, open to everyone so friends can find you.
• Public content — posts, comments, pages and likes, visible to anyone who opens your page or feed.
• IP address — used at connection time to fight spam and attacks (rate limits, temporary bans). It is not sold or shared.

A node’s storage may be hosted by a cloud provider (for example, S3-compatible storage). Only encrypted data goes there.

4. Third-party services

• GIF search — the query goes through the node to Wikimedia Commons (and GIPHY if enabled on the node). Your IP address is not passed to them.
• Update checks — the app fetches a version file from o2msg.space.

5. Moderation — “Dictator 1.0”

Public posts are checked on your device (and re-checked by the node) for illegal content, profanity and 18+ material; such posts are rejected. Private and group chats are encrypted and never checked — we cannot see them.

6. Your rights

• delete messages for yourself and for the other person, clear or delete a chat;
• delete your public posts;
• end sessions on other devices and change your password (keys are rotated);
• sign out on a device (in a browser — “Forget this account in this browser”); a nickname can be released in settings.

7. Children

The service is intended for people aged 14 and over.

8. Changes

If this policy changes, the new version will appear on this page with a new date.