FlakChat
Legal & Policy
Last updated: June 2026
Terms of Use
By creating an account and using FlakChat, you agree to these terms. Please read them.
What FlakChat is
FlakChat is a private encrypted messaging platform. Messages are encrypted on your device before they reach our servers using AES-256-GCM encryption. We do not have the ability to read your messages — ever. The encryption keys never leave your device.
Acceptable use
You agree to use FlakChat only for lawful purposes. The following are strictly prohibited:
- Any activity that violates applicable local, national, or international law
- Harassment, threats, or abuse of any kind directed at any person
- Distribution of illegal content including but not limited to child sexual abuse material
- Fraud, deception, or impersonation
- Attempts to compromise the security or integrity of the platform
- Use of automated tools to access the service without authorization
Account termination
FlakChat reserves the right to terminate any account at any time, with or without notice, for violation of these terms or for any other reason at our sole discretion. During the private beta, accounts are issued by invitation only and may be revoked at any time.
No warranty
FlakChat is provided "as is" during the private beta period. We make no warranties, expressed or implied, regarding the availability, reliability, or fitness of the service for any particular purpose. Use it at your own risk.
Limitation of liability
To the maximum extent permitted by law, FlakChat and its operators shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the service.
Changes to these terms
These terms may be updated as the platform develops. Continued use of FlakChat after changes constitutes acceptance of the updated terms. We will make reasonable efforts to notify users of significant changes.
Contact
Questions about these terms: legal@flakchat.com
Last updated: June 2026
Privacy Policy
Your privacy is the reason FlakChat exists. This policy explains what we collect, what we don't, and why.
What we collect
Account information
- Your chosen handle (username)
- Your email address — used for account verification and security notifications only
- A hashed version of your password (we cannot recover or read your password)
- A TOTP seed for two-factor authentication
Messages and content
Messages are stored on our servers as encrypted ciphertext only. We do not have the encryption keys. We cannot read your messages, and we never will. Vault notes are stored the same way.
Technical data
- Session tokens (stored as one-way hashes — we cannot reconstruct the original)
- IP address hashes (hashed, not stored in plaintext) for security purposes
- Basic server access logs maintained by our hosting provider (DreamHost)
What we do not collect
- Message content — technically impossible due to encryption
- Contact lists beyond what you explicitly add in the app
- Location data
- Device identifiers beyond a basic user agent string
- Tracking pixels, analytics, or advertising data of any kind
How we use your data
- Email address: account verification, password reset, and security notifications only
- No data is sold, shared with third parties, or used for advertising
- No third-party analytics or tracking services are used
Data retention
Your data is retained as long as your account exists. When you delete your account, all associated data — messages, vault notes, contacts, sessions — is permanently deleted from our servers.
Encrypted message ciphertext for ephemeral chats is deleted after it has been read by all recipients, as designed.
Security
FlakChat uses AES-256-GCM encryption, Argon2id password hashing, TOTP two-factor authentication, and httpOnly session cookies. All connections are encrypted via HTTPS with HSTS enforced. Credentials are stored above the web root and never in web-accessible locations.
Your rights
You can delete your account at any time from Settings. This permanently removes all your data. You can also manage your active sessions and revoke access from any device at any time.
Contact
Privacy questions: privacy@flakchat.com
Last updated: June 2026
Accessibility
FlakChat is committed to being usable by as many people as possible. We are actively working to improve accessibility as the platform develops.
Current support
- System font stack — uses your device's native fonts for optimal readability
- Dynamic text — respects your device's text size preferences
- Dark mode — full dark theme reduces eye strain in low-light environments
- Touch targets — all interactive elements meet minimum 44×44pt touch target guidelines
- Color contrast — text and interactive elements maintain sufficient contrast ratios
- No autoplay media — nothing plays without user interaction
- Semantic HTML — proper heading hierarchy and landmark elements throughout
Known limitations
As a private beta, FlakChat has not yet undergone formal accessibility auditing. Known areas for improvement include:
- Screen reader support is not fully tested — ARIA labels are incomplete in some areas
- Keyboard navigation is limited — primarily designed for touch interfaces
- Swipe gestures do not currently have alternative activation methods
- Some status messages may not be announced to screen readers
Reporting issues
If you encounter an accessibility barrier, please contact us. Your feedback directly shapes our development priorities.
Commitment
We aim to meet WCAG 2.1 Level AA guidelines as the platform matures. Accessibility improvements are planned for future releases including full screen reader support, keyboard navigation, and reduced motion options.