Privacy policy
1. Who we are
Wesh is a free, non-profit app published by Samouraï Coop, SARL SCOP (French worker cooperative), 149 avenue du Maine, 75014 Paris, France.
Contact: support@samourai.coop.
2. In short
- No account, no phone number, no email address required.
- Samouraï Coop runs no server for Wesh and receives none of your messages, contacts or location.
- Your data stays on your phone, encrypted.
- No analytics, no crash reporting, no ads, no tracking.
3. Data kept on your phone
- Nickname, identity keys, verified contacts, conversations, drafts, settings.
- They are encrypted, with keys held in the iOS Keychain or the Android Keystore.
- They are excluded from iCloud and Google backups.
- Delete them with Settings → Erase all data, or by uninstalling the app.
4. What people nearby see (Bluetooth)
- Your phone broadcasts your nickname, a temporary identifier and your public keys.
- These keys stay the same until you reset your identity, so a nearby device can recognise your phone from one encounter to the next.
- The local room is public. Every Wesh and BitChat user in range can see it, and can read, keep and relay your messages.
- Private messages are end-to-end encrypted. Only your verified contact can read them. Phones that relay them only see that an encrypted message is passing through.
5. Internet mode (off by default)
If you turn it on:
- your private messages to verified contacts are end-to-end encrypted;
- they are sent over the Tor network, then posted to Nostr relays run by independent third parties, including relay.damus.io, nos.lol, relay.primal.net and offchain.pub;
- relays cannot read your messages. They see an encrypted envelope, the recipient's Nostr public key, a date and a size, and keep them under their own rules;
- the Tor entry relay sees your IP address, but not which Nostr relays you reach or what you send;
- Samouraï Coop neither controls nor receives this data.
6. Permissions
- Bluetooth: talk to nearby phones.
- Camera: scan QR codes. No image is stored or sent.
- Notifications: alert you to new messages. They are created on the phone, with no remote push service.
- Location (Android 11 and earlier): required by Android for Bluetooth scanning. Wesh does not use your location.
7. When you write to us
- If you contact support or send a report, we receive your email address and whatever you choose to include.
- Purpose: to reply and handle the report (legitimate interest: service safety).
- Retention: while we handle your request, then deletion.
8. Your rights
- You have the GDPR rights of access, rectification, erasure, objection and restriction.
- Samouraï Coop holds no data from the app, so you exercise these rights directly in the app (edit nickname, erase).
- For support correspondence: support@samourai.coop.
- You may complain to the CNIL (www.cnil.fr) or your local data protection authority.
9. Minimum age
Wesh is for people aged 16 and over.
10. Changes
Any change is posted on this page with its date. Significant changes are flagged in the release notes.