Privacy Policy

1. Who we are

SendChat is operated by S B Fabricating Inc. In this policy, “SendChat”, “we” and “us” mean S B Fabricating Inc. We are responsible for the personal information SendChat holds about you.

The person in charge of privacy

Sidney Brubacher, Privacy Officer, is the person in charge of protecting personal information at S B Fabricating Inc. Write to our Privacy Officer at support@sendchat.ca (please put “Privacy” in the subject), or by mail to the address above, marked “Attention: Privacy Officer”.

How we handle privacy questions and complaints

Sidney Brubacher looks into every privacy question, request and complaint himself. We answer within 30 days, tell you what we found and what we’ll do about it, and keep a record of each complaint and how it was settled. If you’re not satisfied, you can go to a privacy commissioner (section 11).

How we govern personal information

These are our rules for protecting personal information, which Quebec law asks us to publish:

• Who is responsible. Our Privacy Officer, Sidney Brubacher, is responsible for protecting the personal information SendChat holds and for these rules. The Privacy Officer decides any change to what SendChat collects, uses, shares or deletes.
• Who can see it. Only the people and companies in section 5 and section 7, and only when they need to.
• How long we keep it. Only as long as we need it, for the times in section 9.
• Questions and complaints. The Privacy Officer handles them directly, as described above: answered within 30 days, and each complaint recorded with how it was settled.
• Breaches. Every breach is recorded. One that could seriously harm someone is reported to them and to the privacy commissioners (section 6).

What this policy covers

This policy covers the SendChat app on Android, iPhone and Windows, and the sendchat.ca website. Please read it with our Terms of Use.

We follow Canada’s federal privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA), and, for people in Quebec, Quebec’s Act respecting the protection of personal information in the private sector. This policy is governed by the laws of Ontario and the federal laws of Canada that apply there. Nothing in it takes away rights that the law where you live gives you.

2. Your agreement and your phone’s permissions

When you sign up, the line under Send code says that by tapping it you agree to the Terms of Use and this Privacy Policy and confirm you’re 13 or older (14 in Quebec; see section 12). Accounts made before that line existed are asked once, on a screen in the app. We keep a record of which versions you agreed to, when, how (at sign-up or on that screen), and from which platform and app version.

Your phone also asks you before SendChat can use your contacts, camera, microphone, photos, location, notifications, or Face ID or fingerprint, or open your phone app to call a number. You can say no, or change your mind later in your phone’s settings. Only the feature that needs it stops working.

Some information is needed for SendChat to work at all: your phone number, and the messages and files you send, so that we can deliver them. If you don’t want us to have it, the only choice is not to use SendChat, or to delete your account.

3. What we collect

Here is everything SendChat collects or handles, grouped by what it’s for. How long each is kept is in section 9.

Your account and sign-in

• Your phone number. It’s how you sign in, and how people who have your number find you. We also keep a scrambled (hashed) form of it for contact matching.
• Sign-in codes. We text you a 6-digit code through Twilio. It works for 10 minutes. On Android, SendChat can fill it in for you, reading only that one text and only if you allow it. If a code can’t be delivered, we keep the number and the reason for 1 hour, to spot delivery problems. The Twilio account the codes go through is also used by another of S B Fabricating Inc.’s services (section 7).
• The security check. Before a code is sent, a check by Cloudflare (called Turnstile) makes sure a person, not a program, is asking. Cloudflare receives your device’s IP address and technical signals from the check’s page, and its check may use its own cookies inside the sign-in screen. We keep nothing from it.
• Sessions. For each device you’re signed in on, we keep its IP address, a short description of the app and device (the “user agent”), and when it was used.
• Server logs. Our hosting provider, Supabase, logs the requests your devices make to our servers, including each request’s IP address and user agent, to keep SendChat running and secure.
• Your devices. A list of the phones and computers on your account: the kind of device, its platform, its name (a device’s own name can include yours, like “Sam’s laptop”), the app version, and when it was linked, last used and signed out. Settings, Linked devices shows the ones still signed in.
• Install ID. To recognize your main phone after you reinstall SendChat, the phone uses an install ID. It never leaves the phone as itself: we receive only a scrambled form of it.
• Linking a device. While a computer or another device is being linked, we keep the IP address it asked from, to limit misuse.
• Two-step PIN. If you set one, we keep only a one-way scrambled form (a hash) of it, never the PIN itself.
• Face ID, fingerprint and screen lock. Your phone checks these itself. SendChat learns only whether the check passed.

Your profile and settings

• Name and photo. These, with your phone number, can be seen by people who share a chat with you, people who have your number saved and are matched with you on SendChat, and people who have blocked you. Everyone in a chat, groups included, can see the others’ phone numbers. A seller also sees your name if you bid on their listing, and SendChat’s admins see your name and number on a problem report you send.
• Your profile photo can be opened by anyone with its web address. We keep a small copy and a full-size copy. Anyone who has the web address of either can open it without signing in to SendChat.
• The PRO badge. If you have SendChat Pro, a small PRO tag shows with your name to people who can see your profile. It can’t be hidden.
• Business details (SendChat Pro): business name, phone, email addresses, website, online-order link and opening hours. Anyone on SendChat can see them, except people you’ve blocked or who have blocked you. If your Pro ends, they’re hidden but kept, and come back if you renew.
• Status: Available, Away, Busy or Do not disturb, its message and until when, whether it sends an automatic reply, and which chats that reply has answered. People who share a chat with you or have your number saved see your status and its message, never across a block. Each automatic reply is an ordinary message in that chat. While you’re on Do not disturb, we send your devices your messages without a sound or banner.
• Settings that follow your account to all your devices: your privacy choices (Last seen, and who sees your posts and listings, including people or DM Book groups you picked), the default timer for disappearing messages, notification tones, your media auto-download choices, wallpapers and colours (a photo wallpaper is never shown to anyone else), the order of your tabs, the emoji you used last (just the emoji, not where you used them), and your time zone. We use your time zone to reset your monthly upload allowance at your midnight, and to send notices at a reasonable hour where you are.

Your contacts

• With your permission, SendChat reads your phone’s address book to show who is on SendChat, and to show people by the names you saved. Names, email addresses and street addresses are never sent to us in readable form.
• To find who’s on SendChat, your phone sends each number in scrambled (hashed) form. A scrambled number could in theory be worked out by trying every possible number, so we treat it as personal information.
• We keep a list of which SendChat accounts are in your address book. We also keep a record of every number your address book has asked about, including people who aren’t on SendChat. That record is locked with a secret key kept inside our database, so a copy of it can’t be turned back into numbers. We use it only to limit how many new numbers one account can check (20,000, then 1,000 new ones a day), which makes it hard to use SendChat to find out who is on it, and to make sure our servers answer your phone only about numbers in your own address book. It’s never shared, and never used to contact anyone.
• When someone you’ve saved joins SendChat, they show up in your contacts straight away. For this, your main phone also sends us the numbers in your address book in scrambled form, and keeps the list up to date as you add, change or remove contacts. If you turn off SendChat’s access to your contacts, your main phone empties the list the next time SendChat opens, and sends it again once SendChat has access again. If you sign out on your main phone and no other phone takes over as your main phone, we empty the list, and your phone sends it again when you sign back in. We keep it locked with the same secret key, and only for numbers your phone has already checked. When someone signs up with one of those numbers and gives their name, we tell your devices to check your contacts again. For the same number we do that at most once a day while the list is kept, and note when we last did. Nobody is told that you have their number, and you don’t get a notification. The list is never shared, and never used to contact anyone.
• Names you give people inside SendChat are seen only by you. They also appear in your own notifications, so they pass through Google, and for iPhones Apple, on the way to your phone.
• For linked devices (SendChat Pro): while you have a linked computer or other device, your main phone uploads a copy of your whole address book (names, numbers, email addresses, street addresses, companies and job titles) so that the device can show the same names. It’s encrypted on your phone so that only your linked devices can open it. SendChat can’t read it.

Your messages and files

• What: the text, photos, videos, voice notes, files, stickers, polls and votes, contact cards and locations you send; captions, replies, reactions, edits, mentions, forwards (with a count of how often a message was forwarded) and link previews. The chat list keeps a preview of each chat’s last message.
• Why: to deliver them to the people in the chat, and to keep your chats the same on all your devices.
• Who sees them: the people in the chat, including people added to a group later, who can read messages sent before they joined (on Free, from 90 days before their phone was set up). Our servers can read them too: see section 6.
• Photos and videos lose their location and camera details before they’re uploaded, from any device and anywhere in SendChat (chats, posts, listings, profile and group photos, stickers). The date taken is kept. A file sent as a document is sent exactly as it is, with any details inside it. Photos sent in chats before 3 October 2026, and videos sent in chats or listings before 5 October 2026, stay as they were sent. A video in a format other than MP4 or QuickTime (the formats phones record in), or one that’s damaged, is sent as it is.
• Receipts: when each message was delivered, read or played. The sender sees this for each person, and there’s no setting to turn it off. In a group, how far each member has read is also available to every other member’s SendChat app, though SendChat doesn’t show it to them.
• Groups: the name, photo, description, settings, members, admins and when each member joined. The group’s members see them.
• Your own chat settings. Your starred messages are seen only by you. Whether you pinned, archived, muted or cleared a chat can be read by the other members’ SendChat apps, though SendChat doesn’t show it to them.
• Your tasks (with SendChat Pro): each task’s name, its date and time, when its reminder rings, whether you’ve done it, and the message or chat you made it from. They’re kept on our servers so they’re on all your devices, and only you can see them: nobody in the chat is told.
• Link previews: when you send a link, your own device opens the page to make the preview, so that website sees your IP address. The people you send it to don’t contact the website: the preview travels with the message.
• Searching your chats: searching inside a chat sends the words to our servers to find the matches. They aren’t kept with your account, but they can appear in our hosting provider’s server logs (above) for the limited time those are kept. The chat list’s search runs on your device. Only on a device that shows part of your history (section 9) does it send the words to our servers, to count the older messages that match, and they aren’t kept with your account.
• Stickers you make are cut out of your photo on your phone, using Google ML Kit on the device. They’re kept privately for you.

Notifications

• Each phone has a notification address (a “push token”) that lets us send it notifications. Google’s Firebase software, which provides that address, also makes an installation ID for SendChat on the phone and sends it to Google.
• Notifications travel through Google Firebase Cloud Messaging, and to iPhones also through Apple’s push service. A message notification carries the sender’s name (or the name you gave them), the group’s name, up to the first 200 characters of the message (or a word like “Photo”), and the chat and message IDs. Marketplace alerts carry the listing’s title. A task reminder carries the task’s name and when it was due.

Online and last seen

• Whether you’re online and when you were last seen, for your account and for each of your devices. Only SendChat open on your screen counts as online.
• Who sees it follows your Last seen setting: Everyone (anyone on SendChat you haven’t blocked), My SendChat contacts, people you select, or Nobody. A new account starts on My SendChat contacts; an account made before this default changed keeps the setting it had (Everyone, unless it was changed). DM Book members start with their DM Book groups (below). It works both ways: if you hide yours, you can’t see anyone else’s.

Location

SendChat uses your location only when you choose to share it.

• A place you share (a pin): its position on the map and an address line, kept with the message. Your phone’s own location service (Google’s on most Android phones, Apple’s on iPhone) turns the point into the address line.
• The map picture in that message is drawn by Geoapify. It receives only the point and the zoom, nothing about who you are. We count how many map pictures each account asks for in a day (up to 60).
• Live location: while you share it, only your latest position (with its accuracy, direction and speed) is kept, replaced as you move. No trail is kept. The position is erased 24 hours after sharing stops. Only the device you last started it on sends your position (your other devices show it and can stop it), so while sharing runs, and for up to an hour after it stops, we note which of your signed-in devices that is; signing that device out stops the sharing and deletes that note. On Android, a notification shows while it runs.
• Maps in SendChat (the location screens and the Marketplace town map) come from Google Maps, which sees your device’s IP address and the area you look at. Google’s map software also sends Google its own identifier for SendChat on your device, reports of its own crashes, and how the map is used, such as moving and zooming it (section 7).
• A Marketplace listing’s place is a town chosen from a list, not a street address.

Posts

• Your posts (text, photos, videos, voice and links), the audience you chose, and who viewed them.
• A post is seen only by people in the audience you chose who also have your number saved. When you view a post, its author can see you viewed it.
• A reply to a post is a chat message carrying a copy of the post. A report of a post keeps a copy too.

Marketplace

• Your listings: title, description, condition, prices, auction settings, town, photos and video, audience, and how each ended. Drafts too.
• Bids, offers, sales (paid, picked up, fell through), listings you watch, listings you opened, categories you follow, and the selling rules you accepted (and which version).
• Who sees a listing: people in the audience you chose who have your number saved, never people you’ve blocked; the buyer; and SendChat’s admins, who can see any published listing but never a draft.
• Others see bids as “Bidder 1”, “Bidder 2” and so on. Only the seller sees bidders’ names. A seller sees how many people opened a listing, not who.
• Messaging a seller or a buyer opens an ordinary chat, so you’ll see each other’s phone numbers.
• Words you search for in the Marketplace, or in its list of towns, reach our servers to be answered, and aren’t kept with your account.

SendChat Pro

• Whether you have Pro, and how: given free by SendChat, or a store subscription, with its store, plan, dates, renewal, grace period, billing problems, refunds, price and currency.
• The 60-day free trial. A new account gets Pro free for its first 60 days, once per phone number. We keep when the trial started and ends, the reminders we sent before it ended, and whether you answered the screen shown when it ended. We also keep a scrambled copy of each number that has had the trial, locked with a secret key, so that a new account with that number starts on Free (section 9).
• When you buy SendChat Pro, you pay Apple or Google, not us. We never see your card or bank details. Purchases are handled by RevenueCat, which receives the store’s receipts and tells our server what you bought.
• RevenueCat starts on every main phone signed in with a phone number, even if you never buy, so that a purchase interrupted by closing the app can still finish. It knows your account only by its SendChat ID: we don’t give it your name, number or email. Its software also collects some technical details about your device and the app.
• When SendChat gives an account Pro for free, or takes it back, we keep a log of it: the account’s ID, what was done, a note, and who did it.
• To apply your plan’s limits: how much storage your files use and how much you’ve uploaded this month; when you posted and when your listings went live; how many copies your forwards made each day; and which storage and monthly-upload notices we’ve sent you.

Problem reports, Support and the technical log

• Report a problem (Settings, Help) sends us the category and your description, a screenshot if you add one (re-saved on your phone without its hidden details), the app version, platform, device model, system version and your Pro status (and for a SendChat Pro and billing report, your store subscription). The admins who read it also see your name and phone number. They may answer in a SendChat Support chat, where each reply shows the first name of the admin who wrote it (until that admin’s account is deleted, which takes the name off), and you see that first name while they type one. We never show you an admin’s phone number or account. The admins see when you are typing there, and when you have read their replies, as anyone you chat with does.
• The technical log. Each of your devices keeps a log of the notifications it handled and of its connection to our servers: event names, errors, message and chat IDs, app build, platform and device model. It never holds message content, names or notification addresses. For most people, devices send us only the entries that record a failure. When you send Report a problem, every device on your account sends its full log for the next 7 days (counted again from each new report), so we can trace the problem. We can also keep the full log for an account by hand while we trace a problem.
• Anonymous totals. We count some things by day, such as how often the Pro screen was shown, how often Pro was bought, and how many unused accounts were warned or deleted. These totals don’t say who.
• Crash and error reports. When SendChat crashes, stops responding, or meets an error it didn’t expect, on your phone, your computer or our servers, it sends a report to Sentry, a company that collects crash reports for us. A report says what went wrong and where in SendChat’s code, the app version, the kind of device and its system version, language and time zone, its state at the time (such as free memory and storage, and battery level), and the kinds of screen you last opened (such as “a chat”, never which one). It names your account only by a code made from your account ID, which we can match to your account when we need to, for example to look into a problem you reported; when nobody is signed in, it names no one. Reports aren’t meant to hold your messages, names, phone numbers, email addresses, photos or files, or what’s on your screen, and here is how we keep them out:
  • Before a report leaves your device or our servers, SendChat removes anything it recognises as one of these, by its form (such as a phone number or an email address) or by where it sits in the error (such as a message’s text), and keeps only the first line of an error’s description. This works by recognising patterns, so words of yours that turn up in an error with nothing to mark them could still get through.
  • Some crashes are reported by the parts of SendChat written separately for Android, iPhone and Windows, which that step doesn’t see. For those, the only check is Sentry’s.
  • Sentry removes details it recognises again when a report arrives, such as passwords and the fields we have told it hold personal details.
  • When SendChat crashes on a computer, the report also includes a snapshot of the memory SendChat was using at that moment, which can hold part of what you were reading or writing. Sentry uses it only to find where SendChat crashed and doesn’t keep it.
  Your IP address isn’t in a report, and Sentry is set not to store the address a report comes from.
• SendChat has no analytics software. Crash and error reports are used only to find and fix problems, and the only usage figures we keep are the anonymous daily totals above.

Reports and blocks

• If you report a person, message, group, post or listing, we keep who reported, what was reported, the reason and any details you add, with a copy of a reported post or listing (it may be gone by the time we look). A view-once photo, video or voice message reported before it’s opened is kept for our admins until 90 days after we answer the report, then deleted. Admins can’t save or share it. We never tell the person you reported who reported them, unless the law requires us to.
• To review a report, we may read what was reported and, where needed to understand it, the conversation around it.
• When you block someone, we keep that you blocked them. They aren’t told.

Emails to us

• If you email us, we receive your email address and whatever you write. A request to delete an account by email also holds the account’s phone number and the code we texted to it (section 10).

The DM Book directory

• SendChat reads the DM Book community directory (dmbook.ca). For the people listed in the directory groups SendChat reads, whether or not they use SendChat, we keep their phone numbers only in scrambled (hashed) form, with their groups. Names, email addresses and street addresses are dropped as they arrive and never stored. If you’re listed and don’t want SendChat to keep your number, ask DM Book to remove you from the directory: SendChat drops it at its next daily check.
• We use it to know which SendChat accounts belong to which DM Book groups, so those groups can be used in SendChat, for example as the audience for a post or a listing. A DM Book member’s phone is also told which of the people in their own address book are listed in those groups, to name them by the right card. We send DM Book nothing about SendChat’s users.
• Your settings when you join a DM Book group. When SendChat finds you in a DM Book group, it sets who sees your Last seen, posts and listings to your DM Book groups, replacing your earlier choice. This happens once each time you join. You can change it afterwards in Settings.

Our website

• sendchat.ca is a set of plain pages served by Cloudflare. Cloudflare sees the IP address of everyone who visits. Our pages set no cookies of their own and have no analytics.
• The Windows version downloads from downloads.sendchat.ca, also on Cloudflare. Once installed, Windows checks there for updates every 8 hours and when SendChat starts, so Cloudflare sees that computer’s IP address.

Kept on your device

• To open instantly and work offline, SendChat keeps a copy on your device: chats, messages, names from your address book, posts, listings and settings, and up to 2 GB of photos, videos and files (the oldest removed first).
• On a computer, that copy’s database is encrypted, but the photos, videos, voice notes and files are ordinary files in SendChat’s folder in your Windows profile. On a phone, it’s protected by your phone’s own security.
• Signing out, being signed out or deleting your account wipes the chats, messages, names, posts, listings and settings. The photos, videos, voice notes and files SendChat saved stay in its storage on that device until you uninstall SendChat, or until you tap Free up space in Settings › Storage and data. Uninstalling removes all of it. A few security keys and the device’s own IDs stay on it after you sign out, on purpose: SendChat needs them if you sign back in there. On an iPhone, the install ID stays in the phone’s Keychain even after SendChat is uninstalled.
• SendChat leaves its saved chats and media out of your phone’s own backup (Google’s on Android, iCloud on iPhone). Backups made with older versions of SendChat may still hold them, and any backup may hold a few of SendChat’s settings. Those backups are kept in your Google or Apple account, under their terms.
• Some things are done only on your device: cutting out stickers (Google ML Kit), choosing a voice for Read aloud (your phone’s speech voices, with Google ML Kit’s language detection), and scanning a code to link a device. The photo, text or code itself never leaves your device. Google’s ML Kit sends Google its own identifiers for SendChat on your device and technical details about how it ran, such as the device model and app version, but not your content (section 7). From your camera, microphone and photo library, only what you choose to send leaves the phone.
• Your phone’s share menu shows your recent chats’ names and photos, so you can share into SendChat quickly.

If you test SendChat for us

• Test versions come through Apple’s TestFlight and Google Play’s internal testing. For TestFlight, Apple receives the name and email address you are invited with, as a member of our App Store Connect team, and shows us when you install and open each test version, its crash logs from your iPhone, and any feedback you send us through TestFlight, with its screenshots and comments. Each crash report and piece of feedback carries your iPhone’s details: its model, iOS version, battery level, network, time zone and free space. For Google Play, Google receives the email address of the Google account on our testers list, and shows us crash and not-responding reports from your phone when Android is set to share diagnostics with Google, and any feedback you send us through the Play Store. Until 12 October 2026 they came through Google’s Firebase App Distribution, which received your email address and, for an iPhone, its device ID.
• Testers’ devices send their full technical log at all times, and testers’ accounts aren’t deleted for not being used.
• A few test accounts sign in with an email address instead of a phone number. The admins see that address on a problem report sent from such an account.

4. How we use it

• To run SendChat: your account, delivering messages and notifications, keeping your devices in step, and the features you use.
• To keep SendChat and its users safe: securing sign-in, limiting misuse (such as the contact-matching and sending limits), reviewing reports, and enforcing the Terms of Use.
• For SendChat Pro: knowing who has it, applying each plan’s limits, and handling subscriptions.
• To answer your problem reports and fix what’s wrong.
• To tell you about your account: for example, that your storage is almost full, that your Pro has ended, that your copy of your data is ready, or that your account will be deleted for not being used.
• To meet our legal obligations.

We don’t use your information for advertising, we don’t build profiles of you, and we don’t use your messages to train AI. S B Fabricating Inc. runs other businesses too; we use information from SendChat only for SendChat, never for them. If we want to use your information for a new purpose, we’ll ask you first.

5. Who can see your information

People on SendChat

Who sees each kind of information is described with it in section 3. In short: the people in a chat see what’s sent in it, including earlier messages for people added to a group later, and each other’s phone numbers; your profile is seen by people who share a chat with you or have your number saved; posts and listings go only to the audience you choose, among people who have your number saved; and your Last seen follows your setting.

People at SendChat

• Admins are a small number of people chosen by S B Fabricating Inc. They see problem reports, with the reporter’s name, phone number, app version, device and Pro status; SendChat Support conversations; and Marketplace listing reports and any published listing, including hidden ones, but never a draft.
• Full access. Sidney Brubacher, who runs SendChat, has full access to our servers. So do the server programs that run SendChat, and the tools he uses to maintain and check it, which can include AI coding assistants working under his direction (section 7). Full access means everything on our servers, messages included. He reviews reports of people, messages, groups and posts.
• Our email, support@sendchat.ca, is held in S B Fabricating Inc.’s Microsoft 365 (section 7). The people S B Fabricating Inc. gives access to it can read what you send us.
• People at SendChat look at personal information, and messages in particular, only when they need to: to run and fix SendChat, to deal with a report or a problem you sent us, to keep people safe, or to meet the law.

Companies that help us

The companies in section 7 that work for us receive what they need to do their job for us. Google’s map and ML Kit software in the app also sends Google some information, which Google handles under its own terms, and the other services your device uses directly handle what they receive under theirs (section 7).

6. Security, and why SendChat is not end-to-end encrypted

How we protect your information

• Every connection between the app and our servers is encrypted (HTTPS).
• Every table in our database has access rules, so the app can read only what you’re allowed to see. Files are private, and every download is checked against who is allowed to see the file. Profile photos are the exception (section 3).
• Signing in needs a code texted to your number, and you can add a two-step PIN. Linking a device or changing the PIN needs your phone’s screen lock.
• A linked device that isn’t used for 30 days is signed out, and all linked devices are signed out if your main phone isn’t used for 14 days. Linked devices are also signed out and wiped 7 days after SendChat Pro ends, unless it’s renewed by then.
• The address-book copy for linked devices is encrypted so that only your devices can open it. The records of numbers your address book asked about, and of the numbers in it now, are locked with a secret key.
• Every night we keep a backup copy of uploaded files with Cloudflare, except posts, view-once files, disappearing messages’ files and the address-book copy. Each copy is locked with our own key before it leaves our servers, so Cloudflare can’t open it.
• Photos and videos lose their location and camera details before upload (section 3).

No system is perfectly secure. Protect your phone with a screen lock, and consider setting a two-step PIN.

If something goes wrong

If a security breach involving your information could seriously harm you, we’ll tell you, and report it to the Office of the Privacy Commissioner of Canada (and, for people in Quebec, the Commission d’accès à l’information), as the law requires. We keep a record of every breach.

7. Companies that help us run SendChat

The companies below, except those under “Services your device uses directly”, work for us. Each receives only what it needs to do its job for us, may use it only for that job, and must protect it as well as this policy does; our agreements with them require it. We remain responsible for your information while they handle it for us.

Supabase

Hosts SendChat: our database, sign-in, file storage, live updates, server functions, logs and backups. It holds everything on our servers described in this policy.

United States (Amazon Web Services, Oregon). Some server functions may run in other regions of Supabase’s network.

Twilio

Sends text messages. Sign-in codes go through a Twilio account that S B Fabricating Inc. also uses for another of its services; the people who manage that account can see each code text and the number it went to. SendChat’s own texts, the warnings before an unused account is deleted, come from SendChat’s own number. Twilio receives your phone number and the text, and keeps its own records of the texts it sends.

A United States company.

Google Firebase Cloud Messaging

Delivers notifications to every phone. It receives notification addresses, the installation ID its software makes for SendChat on each phone, and each notification’s content (section 3).

A United States company.

Apple Push Notification service

Delivers notifications to iPhones, through Firebase. It receives the same.

A United States company.

RevenueCat

Handles SendChat Pro subscriptions. It receives your SendChat account ID from every main phone, the stores’ receipts and your purchase history, and technical details its software collects. Your record there is deleted when you delete your account.

A United States company.

Cloudflare

Runs the security check at sign-in, our website and the Windows downloads, and stores the nightly backup of files (in Cloudflare R2). It receives IP addresses and technical signals from the check, the website and downloads, and backup copies locked with our own key, which it can’t open.

A United States company, with data centres around the world.

Geoapify

Draws the map picture for a place you share. It receives only the point and the zoom.

European Union.

Microsoft 365

Holds our email, support@sendchat.ca, and receives whatever you email us.

Microsoft, a United States company.

Sentry

Collects SendChat’s crash and error reports from the app and our servers. It receives the reports described in section 3, which are not meant to hold your messages or contact details (except what a computer’s crash snapshot may hold, as section 3 says), and doesn’t store your IP address.

United States.

Shorebird

Delivers fixes to the SendChat app on phones without a new store version. Each time SendChat starts, and each time you come back to it, your phone asks Shorebird’s servers whether there’s a fix. It receives SendChat’s app ID, the app’s version and the fix it’s running, the phone’s platform and processor type, a random ID made for SendChat on that phone (used to count how many phones use it), and your phone’s IP address. After a fix, it also receives whether it downloaded and installed, or a short note of why it failed. It receives nothing about who you are or what’s in SendChat.

Its servers run on Cloudflare and Google, United States companies.

Anthropic (Claude)

The AI coding assistant Sidney Brubacher uses to build, maintain and check SendChat. When he has it work on our servers, it can receive what it reads there, which can include personal information, and Anthropic processes it to do that work.

A United States company.

Apple TestFlight and Google Play internal testing

Send test versions to the people who test SendChat for us. Apple receives testers’ names and email addresses, and gives us their installs and sessions, crash logs and the feedback they send, with screenshots and comments, each with the iPhone’s model, iOS version, battery level, network, time zone and free space. Google receives the email addresses of testers’ Google accounts, and gives us crash and not-responding reports (where Android shares diagnostics with Google) and the feedback testers send.

United States companies. Testers only.

Google Firebase App Distribution

Sent test versions to the people who tested SendChat for us until 12 October 2026. It received testers’ email addresses and iPhone device IDs.

A United States company. Testers only.

Services your device uses directly

Your device also uses these services directly. They handle what they receive under their own terms and privacy policies, and Google may use what its software sends it to maintain and improve its own services.

Apple App Store and Google Play

Take payment when you buy SendChat Pro. We never see your card.

Google Maps

Shows maps in SendChat. It receives map requests from your device, with its IP address and the area shown. Google’s map software in SendChat also sends Google its own identifier for SendChat on your device, details of the device, reports of its own crashes, and how the map is used, such as moving and zooming it.

A United States company.

Google ML Kit

Runs on your device to cut out stickers, to tell which language a message is in for Read aloud, and on Android to read the code when you link a device. The photo, text or code never leaves your device. ML Kit sends Google its own identifiers for SendChat on your device, details of the device and app, and how ML Kit ran and how well, but not your content.

A United States company.

Your phone’s location service (Google or Apple)

Finds the address line for a place you share. It receives the point you picked.

Google Search and Google Lens

Look for a photo on the web when you choose Search on web on it, in a chat or a listing. SendChat uploads a copy of that one photo from your device to Google’s image search, with its location and camera details taken out, and Google’s results open in your browser. Nothing goes until you choose it, and the first time on each device a notice says the photo goes to Google. Google receives the photo and your device’s IP address. SendChat’s servers send Google nothing.

A United States company.

Websites you send links to

See your IP address when your device makes the link’s preview (section 3).

8. Your information outside Canada

SendChat has no servers in Canada. Your information is stored in the United States (Oregon), and it’s handled in the United States, the European Union and other countries where the companies in section 7 work. While it’s there, it’s subject to those countries’ laws, and their courts, police and national security agencies may be able to get it.

For people in Quebec: your information is sent outside Quebec. Quebec law requires us, before it leaves Quebec, to assess whether it will be properly protected in each place it goes, and to protect it with written agreements with the companies that receive it.

9. How long we keep it

We keep information only as long as we need it for the reasons in section 4. Here is how long, item by item.

Your account

Your account, phone number, profile and settings

Until you delete your account, or it’s deleted for not being used (section 10).

A sign-up whose code was never entered

24 hours.

A code that couldn’t be delivered

1 hour.

Sessions

Until you sign out or are signed out. The record that a session ended: 1 day.

Your list of devices

Until you delete your account. A signed-out device leaves the list you see in Settings, but our record of it is kept until you delete your account.

A request to link a device, with its IP address

1 day.

Notification addresses

Deleted when the device signs out, when Google says the address no longer works, or after 30 days without being refreshed. When that last happens, a copy is kept until 13 months after the phone last refreshed it, used only to send the two warnings before an unused account is deleted, and deleted sooner if Google says it no longer works. No copy is kept for testers’ accounts.

Online status of each device

30 days after it was last seen. Your account’s last seen: until you delete your account.

Your agreement to the Terms of Use and this policy

Until you delete your account.

Records of the warnings before an unused account is deleted

When each warning was sent, Twilio’s ID for each text, and the deletion date: until the account is used again or deleted. After an account is deleted for not being used, a note that its old sign-ins ended for that reason is kept for 400 days, with nothing that names the account, so a phone opened later can say why.

Contacts

Your matched contacts, and the locked records of numbers your address book asked about and of the numbers in it now

Until you delete your account. The numbers in it now also go when you turn off contacts access, or sign out on your main phone with no other phone taking over.

The days your account reached the contact-matching limit

90 days.

Names you give people

Until you change them or delete your account.

The encrypted address-book copy for linked devices

Replaced at each upload, and deleted when you delete your account. A linked device’s key to it is deleted when that device is signed out.

Messages and files

Messages and their files

Until they’re deleted. Delete for everyone removes the content at once and leaves a “This message was deleted” line. A disappearing message is deleted within about 5 minutes of its timer ending. A file is removed within about 5 minutes once no message uses it. An upload that never became a message is removed about 3 days after it was uploaded.

Delete for me, and clearing or deleting a chat

Hides it for you only. The other people in the chat keep their copy.

View-once photos, videos and voice messages

Destroyed when the last person has opened them, or 14 days after sending. One reported before it’s opened is kept for SendChat’s admins until 90 days after the report is answered, then destroyed. Admins can’t save or share it.

Copies of live updates

Our hosting provider keeps a copy of each update it sends to devices, message content included, for about 3 days. So a deleted or disappearing message can remain there, readable only with full server access, for up to about 3 days after it was sent.

Receipts, reactions and starred messages

Until the message, your place in the chat, or your account is deleted.

Tasks

Until you delete them. A task you’ve done is deleted 30 days later. A task stays if the message or chat it came from is deleted. If SendChat Pro ends, your tasks are kept, without reminders, until it’s back.

A group you left or were removed from

Taken out of your chats when you leave or are removed. The messages you sent there stay in the group for its other members.

Live location

The position is erased 24 hours after sharing stops. The note of which of your devices is sending it is deleted within an hour after sharing stops, or when that device is signed out.

Daily counts of map pictures

Earlier days are dropped at your next request.

Posts and Marketplace

Posts, with their files and views

Deleted within minutes of their 24 hours ending, or when you delete them. A reply to a post keeps a copy of it (its text and a small picture) for as long as that reply is kept, and a report of a post keeps a copy too.

Listing drafts

Until you delete them.

Published listings

Until you delete your account; ending or cancelling a listing keeps its record. Full-size photos and video are removed 12 months after a listing ends; the smaller copies of the photos and the video’s still picture stay. A photo with no smaller copy, or a video with no still picture, is kept. A listing with a report not yet handled keeps everything until it is.

Bids, offers, sales, and listings you watched or opened

Until your account, or the other person’s, is deleted.

Marketplace notifications

14 days after they’re sent.

SendChat Pro

Your Pro record, storage used, uploads this month, and the storage and upload notices we’ve sent you

Until you delete your account.

When you posted, when your listings went live, and daily counts of your forwards (for the daily limits)

2 days.

Your record at RevenueCat

Deleted when you delete your account.

The log of Pro given free by SendChat

Kept after your account is deleted, with no end date, as a record of what SendChat gave.

A scrambled copy, locked with a secret key, of each phone number that has had the 60-day free trial of Pro

Kept after your account is deleted, with no end date, so that a new account with the same number starts on Free. It’s used for nothing else.

Support, reports and safety

Problem reports, their screenshots and the Support chat

90 days after an admin marks the report handled. Open reports are kept until they’re handled. A screenshot that never made it into a report: 1 day.

The technical log

14 days. The note that an account’s devices send their full log ends 7 days after its latest problem report, or, if we added it by hand, when we remove it.

Crash and error reports

30 days, kept by Sentry. They stay for those 30 days if you delete your account, named only by the code made from your account ID.

Reports you make about others

Until you delete your account. If the person you reported deletes theirs, the report stays, without their account, with any copy of a post or listing it holds.

A reported listing whose seller deletes their account

If the report isn’t handled yet, the listing’s photos and video are kept for the admins only, until it is.

Blocks

Until you unblock the person or delete your account.

Emails to us

Kept in our mailbox, support@sendchat.ca, until you ask us to delete them. Our mailbox is held in Microsoft 365 (section 7).

Texts a person at SendChat sent from their own phone

The one-time code for a request to delete an account by email, and, for an account with a two-step PIN, the text saying a deletion was asked for (section 10). They stay on that phone only until the account is deleted, then they’re deleted. The phone’s mobile carrier, Bell, in Canada, keeps its own records of them under its own policies.

Copies and backups

Your copy from Download my data

7 days after it’s ready. Deleted sooner if you cancel it or delete your account.

The nightly backup of files

A deleted file leaves the backup within 7 days. If a file disappears in a way that looks like a fault on our side, its backup copy is kept until an admin has checked it, then leaves within 7 days.

Our hosting provider’s database backups and server logs (which include IP addresses)

Kept for the limited periods Supabase’s service sets, then deleted.

Records kept by other companies

Twilio, Google, Apple, Cloudflare, RevenueCat and Shorebird may keep their own records of what they handled for us, under their own policies.

DM Book directory entries

Until the directory no longer lists them (checked daily).

What a new phone shows on Free is not deletion

On the Free plan, a phone you set up shows messages from 90 days before the day it was set up, and everything after. That only limits what that phone downloads and shows. Older messages aren’t deleted: they stay on SendChat, SendChat Pro shows them, and Download my data includes all of them. Nothing a phone could open ever locks later.

10. Deleting your account

In the app

On your main phone, open Settings and tap Delete my account, at the bottom under Sign out. Delete your account has the steps. This deletes:

• your account, profile, phone number, settings and devices;
• every message you sent, from every chat, for everyone, with its files (unless another message in that chat still uses the same file);
• your group memberships, receipts, reactions, starred messages, tasks, contact matching, blocks, the reports you made, your posts, your listings with their photos and video, your bids, offers and sales, your Pro record, your problem reports with their screenshots and your Support chat, and your PIN;
• your profile photos, stickers, wallpapers, address-book copy and data copy;
• your record at RevenueCat (we keep asking RevenueCat until it’s done).

If you were a group’s only admin, the member who has been in it longest becomes admin (in a group of more than 10, a member with SendChat Pro first). SendChat’s copy of your chats on the phone you delete from is wiped; your other devices are signed out and wiped when they next connect. Photos, videos and files SendChat saved on a device stay there until you uninstall SendChat (section 3).

Deleting your account doesn’t cancel a SendChat Pro subscription bought in the App Store or Google Play. Cancel it in the store, or it will keep renewing.

What stays after you delete your account:

• messages other people sent, including your messages and files they forwarded, stickers they added from yours, listing cards already shared into chats, and the copy of your post or listing that a reply to it carries;
• your messages on someone else’s device that was offline when your account was deleted, which may keep showing what it had already saved;
• photos, videos, voice notes and files SendChat saved on your own devices, until you uninstall SendChat from them or free up space;
• reports others made about you, without your account, with any copy of a post or listing they hold;
• if you were one of SendChat’s admins, the replies you wrote in SendChat Support chats, which were sent as SendChat Support, without your name;
• the log of any free Pro SendChat gave you;
• if your number had the 60-day free trial of Pro, a scrambled copy of it, locked with a secret key, so that a new account with that number starts on Free;
• the photos and video of one of your listings with a report not yet handled, for the admins only, until it is;
• for up to about 3 days, copies of live updates, and for up to 7 days, backup copies of your files;
• your number, in scrambled or locked form, in other people’s contact-matching records, and in the DM Book directory if you’re listed there: those belong to other people’s accounts and to the directory;
• if you asked by email, Bell’s records of the texts a person at SendChat sent your number from their own phone: Bell, in Canada, is that phone’s mobile carrier and keeps them under its own policies (the texts themselves are deleted from the phone once your account is deleted, section 9);
• whatever our hosting provider’s backups and logs, Twilio, Google, Apple, Cloudflare, RevenueCat and Shorebird keep under their own policies.

Without the app

Email support@sendchat.ca with the subject “Delete my SendChat account” and the phone number of the account. A person at SendChat reads it and texts that number a one-time code from their own phone, not from the numbers SendChat’s automatic texts come from. Send the code back to us by email, and we’ll delete the account in the same way. If the account has a two-step PIN, once the code comes back we text its number that a deletion was asked for by email, and wait 7 days before deleting it. If you didn’t ask, email us within those 7 days and nothing is deleted. Your email stays in our mailbox (section 7 says who holds it). See Delete your account for the steps.

Accounts that aren’t used

If an account isn’t used on any device for 12 months (“used” means SendChat open on screen), we delete it in the same way, including its messages from everyone’s chats. 30 days and 7 days before, we send a notification to its phones and a text to its number from SendChat’s own number. Opening SendChat once cancels it. An account no warning can reach is still deleted on its date.

Accounts with SendChat Pro, paid or given free, aren’t deleted this way: their 12 months start when Pro ends. SendChat Support, app store review and tester accounts are exempt too. A phone whose account was deleted this way says why. How long we keep the records of the warnings is in section 9.

11. Your rights and choices

• Get a copy of your information. Download my data (in Settings, open Account; it’s at the bottom of the Personal tab) gives you a copy of everything you can see in SendChat: your profile and settings, every chat from both sides, and your listings, posts and bids, with your full history (not limited to 90 days), with or without photos, videos and files. It’s one zip file, with a readable page for each chat and the same information in a form other software can read. It’s free on every plan, ready within minutes to hours, and kept for 7 days. A device signed in less than 7 days ago can’t ask for it or download it yet. It leaves out names from your phone’s address book and settings kept only on your phone, which are already on your phone.
• Ask what we hold and how we use it, including anything Download my data doesn’t cover. Write to us.
• Correct it. Change your name, photo and status in Settings, and, with SendChat Pro, your business details (you can delete them on any plan). Your phone number can’t be changed in SendChat yet. If you’re giving up your number, delete your account first (section 10), because whoever gets the number next could sign in with it.
• Delete it. Delete messages for everyone, delete posts and listing drafts, or delete your account (section 10). A published listing can be cancelled, but its record stays until you delete your account; its full-size photos and video are removed 12 months after it ends.
• Withdraw your consent. Turn off a permission in your phone’s settings, change your privacy settings, stop sharing your location, sign out linked devices, or delete your account. Some features will stop working.
• Choose who sees what. Your Last seen setting, the audiences for your posts and listings, whether you share post views, disappearing messages, view-once photos, videos and voice messages, and blocking. Unless you change them, your Last seen, your listings’ audience and your posts’ audience start as My SendChat contacts. An account made before these defaults changed keeps the Last seen and listings audience it had (Everyone, unless it was changed). DM Book members start with their DM Book groups for all three (section 3).
• Ask about automatic decisions. Some things happen automatically, under the rules in this policy and the Terms of Use: for example, deleting an account that hasn’t been used for 12 months. You can ask us how such a decision was made, and ask for a person to review it.
• Complain. Please write to Sidney Brubacher first. You can also complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, to the Commission d’accès à l’information du Québec (cai.gouv.qc.ca). In Alberta or British Columbia, you can also contact your province’s Information and Privacy Commissioner.

To make a request, write to support@sendchat.ca (please put “Privacy” in the subject) or to the address in section 1. We’ll first confirm it’s you, for example with a code texted to your account’s number, and we’ll answer within 30 days. We don’t charge for it.

If you live outside Canada

SendChat can be used with a phone number from Canada, the United States, the United Kingdom, Ireland, Australia or New Zealand. The law where you live may give you other rights too, and you can use them by writing to us. In Australia, you can also complain to the Office of the Australian Information Commissioner (oaic.gov.au), and in New Zealand to the Privacy Commissioner (privacy.org.nz).

If you’re in the United Kingdom or the European Union

The UK GDPR, or the EU’s General Data Protection Regulation, also applies to your information. We are its controller: S B Fabricating Inc., at the address in section 1.

• Why we’re allowed to use it (our legal bases):
  • to provide SendChat under our agreement with you: your account, delivering your messages and files, keeping your devices in step, the features you use, and SendChat Pro;
  • our legitimate interest in keeping SendChat secure and working: the sign-in check, limits on misuse (such as the contact-matching limit), backups, the technical log, crash and error reports, reviewing reports and enforcing the Terms of Use;
  • your consent, for what your phone asks your permission for (contacts, location, camera, microphone, photos and notifications). You can withdraw it at any time in your phone’s settings;
  • our legal obligations.
• Your rights: to see your information and get a copy of it, to have it corrected or deleted, to have its use limited, to object to a use based on our legitimate interests, and to take it elsewhere (Download my data gives it to you in a form other software can read).
• Outside the UK and the EU: your information is handled in Canada, where we are, and in the countries in section 8. Where the law requires safeguards for that, we rely on the protections in our agreements with the companies in section 7.
• Complaints: you can complain to the Information Commissioner’s Office in the UK (ico.org.uk), to the Data Protection Commission in Ireland (dataprotection.ie), or to the data protection authority where you live or work in the EU.

12. Children

SendChat is for people 13 and older. When you sign up, you confirm you’re at least 13. We don’t knowingly collect information from children under 13. If we learn that an account belongs to someone under 13, we’ll delete it. If you think a child under 13 is using SendChat, please write to us.

If you live in Quebec, you must be 14 or older to use SendChat, because Quebec law requires a parent’s or guardian’s consent to collect information about a child under 14. If we learn that an account belongs to someone in Quebec under 14, we’ll delete it.

If you’re under the age of majority where you live (18 in Ontario), the Terms of Use ask a parent or guardian to agree to them for you.

13. No ads, no selling, no tracking

• We don’t sell, rent or trade your personal information.
• We don’t show ads, and we don’t use your information for advertising.
• The app contains no advertising or usage-analytics software, and SendChat doesn’t read your device’s advertising ID. Crash and error reports go to Sentry only so we can find and fix problems (section 3). Google’s map and ML Kit software in the app send Google their own identifiers and details of how they ran, under Google’s terms (section 7).
• We don’t track you across other apps or websites. Because we don’t track you, SendChat and our website work the same whether or not your browser sends a “Do Not Track” signal.
• Our website sets no cookies of its own and has no analytics or trackers. The security check at sign-in is run for us by Cloudflare (section 7), and may use Cloudflare’s own cookies inside the sign-in screen.

14. When the law requires it

We may disclose information when the law requires it, for example to obey a court order, warrant or other valid legal demand, or where the law allows it, such as to protect someone’s life, health or safety in an emergency, or to investigate fraud or a breach of the law. We check each demand and give only what it requires. We report child sexual abuse material to the authorities, as Canadian law requires.

If S B Fabricating Inc. ever sells or transfers SendChat, your information may go to the new operator, who must keep protecting it as this policy says. We’ll tell you before that happens.

15. Changes to this policy

An important change is a change to what SendChat collects, shares, charges or deletes. We tell you about one at least 30 days before it applies, in the app and on this page. When it applies, SendChat asks you to agree before you carry on.

If you don’t accept an important change, you can end your agreement with us at no cost, before it applies or within 30 days after, by deleting your account on your main phone (section 10). If you have a SendChat Pro subscription, cancel it in the App Store or Google Play too.

Smaller changes, like clearer wording, only update this page and the date at the top.

16. Contact us

For a question, a request or a complaint about your personal information, write to Sidney Brubacher, our Privacy Officer (please put “Privacy” in the subject of an email):

In SendChat, you can also use Settings, Help, Report a problem.