Security & Privacy

1. The short version

• We could technically read your Omut chats and the Telegram and WhatsApp messages that pass through our server. We don't, and we don't write message text to logs.
• Omut chats are protected in transit, but they are not end-to-end encrypted. We say this up front.
• Voice messages are transcribed on your phone. Only when you tap “Summary” does the transcript text go to Claude.
• We don't sell your data and don't use it for ads.
• You can delete your account in the app at any time.

2. What we store and where

Our servers, database and file storage run in OVHcloud data centers. The website and DNS go through Cloudflare.

• Your account: username, display name, email, a hash of your password (never the password), and the public part of your passkeys.
• Omut chats: messages, attachments, reactions, read receipts, call history. Attachments are deleted after 180 days.
• Connected Telegram and WhatsApp: the session that lets our server receive your messages, and the data needed to show your chats.
• Devices: the push token Apple needs to deliver notifications.

Some things never leave your device: your address book, the audio of voice messages you transcribe, and your app passcode.

3. Who can see your messages

The people in the chat, and you. Our server stores Omut messages so you get your history on a new device, search and notification text. That means the server could read them — “we can't” would be a lie, so we say “we don't”.

Apple receives notification text to show it on your lock screen. If you'd rather not, turn off previews in your iPhone's notification settings.

4. Telegram and WhatsApp: what the server sees

For notifications to arrive while the app is closed, the Telegram session lives on our server, not only on your phone. WhatsApp is connected as a linked device, the same way WhatsApp Web works. So:

• a Telegram session on the server technically makes it possible to read your messages. We don't read them and we don't write message text to logs — including error logs;
• the server sees that you're connected and from which device, and that a message was delivered;
• media is kept only as long as it takes to hand you the file;
• your Telegram two-step verification password is used once at sign-in and is not stored;
• you can disconnect Telegram or WhatsApp in the app at any time, and you can also end the session from Telegram's or WhatsApp's own list of devices.

If we find a way to keep notifications working without holding the session on the server, we will switch to it.

5. What goes to Claude

Omut uses Claude from Anthropic for one thing today: summaries of long voice messages in Omut chats.

• The voice message is turned into text on your phone. The audio is not sent to us or to Anthropic.
• Only when you tap “Summary” does the transcript text go from our server to Anthropic. Nothing is sent if you don't tap it.
• We keep the summary, not the transcript, so others in the chat can read it without sending the text again. The summary is deleted together with the voice message.
• Anthropic does not train its models on API data by default.
• AI features are not available in all countries. Where they aren't, nothing is sent.

6. Signing in: passwords and passkeys

• Passkeys: sign in with Face ID or Touch ID. The private key stays on your device; we store only the public part, so there is no password to steal from us.
• Passwords are stored only as an Argon2id hash with a secret kept separately from the database. Repeated failed attempts are slowed down.
• You can also sign in with Apple or Telegram, and keep several methods so you don't lose access.
• The app can be locked with a passcode or Face ID. Access tokens on your device are kept in the Keychain.
• Connections between the app and our servers use TLS.

7. Analytics

The iPhone app counts a short, fixed list of steps — such as “onboarding finished” or “Telegram connected” — and sends crash reports, through AppMetrica. No message text, names, phone numbers or chat IDs. You can turn it off: Profile → Privacy and Sign-In → Usage Analytics.

This website uses Cloudflare Web Analytics, which counts visits without cookies.

8. Deleting your account

Delete your account in the app — no emails, no support chat. You are signed out everywhere at once. You have 30 days to change your mind by signing in again; after that your profile, Omut messages, attachments, connected sessions and summaries are deleted. Messages you sent to others stay in their chats but are no longer linked to you. Details are in the Privacy Policy.

9. Reporting a vulnerability

Found a security issue? Write to [email protected] with the steps to reproduce it. Please don't access other people's data and don't disrupt the service while testing. We'll reply, keep you updated, and credit you if you'd like.

Service status: status.omut.chat.