更新日期：2026 年 9 月 15 日
ProjectY 是一款端到端加密的即时通讯应用。我们的设计目标是：你的消息内容只有你和收信人能看到，服务器和开发者都看不到。本政策说明应用会处理哪些数据、存放在哪里、以及你如何控制它们。
身份密钥、好友列表、聊天记录、文件库内容都保存在你的手机上，并用存放在系统钥匙串中的密钥加密，不参与 iCloud 备份。消息按你设定的保留时间自动删除。
当双方不在附近时，消息经由我们的信箱服务器中转。服务器只保存：
服务器不记录 IP 地址与身份的对应关系，不做用户画像，不与任何第三方共享数据。
本应用不面向 13 岁以下儿童，也不会有意收集儿童的任何信息。
关于隐私的问题或举报，请发邮件至 report@projecty.vip。
Last updated: September 15, 2026
ProjectY is an end-to-end encrypted messenger. Message content is encrypted on your device with keys negotiated between you and the recipient; our mailbox server relays ciphertext only and cannot read it.
We do not collect message content, your contacts, phone number, email, real name, location, advertising identifiers, or analytics. There are no third-party SDKs.
Kept on your device only: identity keys, friends, chat history and the vault, encrypted with a key in the system keychain, excluded from iCloud backup, and deleted automatically according to the retention time you choose.
Kept on the mailbox server: encrypted messages while the recipient is offline (deleted on pickup, at most 30 days); your name card (nickname, public key, invite code) so that people you invite can find you, which you can withdraw at any time; and a push token used only to wake the app ("you have a new message", never the content). The server does not profile users or share data with anyone.
Permissions: camera and photos (sending media, scanning QR codes), microphone (voice messages), Bluetooth and local network (nearby messaging without a server), Face ID (app lock, handled by the system), notifications.
Your control: delete your account in the app at any time, which withdraws your name card and erases all local data; remove friends, leave groups, block and report people; set a retention time per chat.
The app is not directed at children under 13. Questions or reports: report@projecty.vip.