Privacy Policy
Last updated: 29 October 2026
Loamz Chat is a private messenger for people and AI helpers. It is run by Ravikumar Chavva from Bengaluru, Karnataka, India ("we", "us"). This policy explains what we collect, why, what we cannot see, who else handles your data, how long we keep it, and what you can do. It follows India's Digital Personal Data Protection Act 2023 (DPDP Act).
Two kinds of chats
Chats between people are end-to-end encrypted. Messages, pictures, voice notes, files and stories are scrambled on your phone or computer before they leave it. Our server holds only scrambled data that it cannot open.
Chats with an AI agent are different. An agent has to read what you write to answer, so what you say to an agent is not end-to-end encrypted. It is stored on our server and sent to an AI provider to produce the answer (see "AI agents" below). If you do not want that, do not talk to agents, or turn on "Hide AI features" in Settings, Privacy.
What we collect
Sign-in details: your email address and display name from Google or your company login, and your Google profile picture address if there is one.
Access request: the short reason you give when you ask to join the beta.
Connection details: your IP address when your device connects (kept in server logs), and the address your browser gives us to send notifications when the app is closed.
Chat structure: which chats you are in, your role in each, which devices you have linked, when entries were sent, and how big they are.
Files you send: the scrambled files themselves, how big they are, and how much of your 100 MB allowance they use.
Feedback: anything you send through "Help and feedback".
If you use AI agents: your conversations with agents, the notes and summaries agents keep of them, the agents you make and their settings, schedules you set, files agents make, the apps you connect (we hold the access key you approve for each), and simple usage counts.
Your choices: such as your time zone, your name for agents, and whether agents are paused.
What we cannot see
In chats between people, we cannot see or read:
the text of messages, replies and reactions;
pictures, voice notes and files;
stories (a story is an encrypted message to the people you chat with);
your name and picture as shown inside chats (they are shared with your chat as an encrypted message);
your encryption keys, which stay on your device;
your backups: we never receive them, and they are sealed on your device with a recovery code or passphrase only you hold.
Anyone who inspects our servers sees scrambled data and the structure listed above.
Stories
A story is shown to the people you have a one-to-one chat with, for 24 hours. Their devices stop showing it after that. It is an encrypted entry like any message, so the scrambled entry stays in the chat record. We do not show stories to anyone else, and we cannot read them. If you turn off read receipts, people who view your story are not reported back to you.
AI agents
When you use an AI agent:
what you send it, and what it replies, is stored on our server and is not end-to-end encrypted;
the text needed to answer (your messages, the agent's instructions, notes and the results of any tools it uses) is sent to an AI provider, today OpenAI in the United States, which sends back the answer. If you send a voice message to an agent, OpenAI also turns the speech into text. We do not send this to Google or to any other AI provider;
if an agent is in a chat with other people, it and its provider can read what is said in that chat. Every agent shows a bot badge, and the people in the chat can remove it;
agents can run on a schedule you set and can start helper agents for a job. You can pause all your agents at any time in Settings, Privacy, and nothing runs while they are paused.
We do not use your conversations to train AI models. The AI provider's own terms apply to what we send it.
Why we use your information
to let you sign in and to decide whether to approve your request to join;
to deliver scrambled messages and files to the right devices, and to wake your phone when a message arrives;
to run the agents, schedules and apps you choose;
to stop spam, attacks and abuse, and to fix bugs;
to answer when you write to us.
We do not sell your personal data, show you ads or track you across the web.
Who else handles your data
Oracle Cloud Infrastructure, in Hyderabad, India: our server and database.
Backblaze (B2), in Europe (Netherlands): an off-site copy of our database, encrypted before it leaves our server. We also keep a monthly encrypted copy in Oracle's storage in Hyderabad.
Resend: sends the emails we send, such as your approval notice.
Cloudflare: runs the name of our website (DNS) and forwards the emails people send to our support and privacy addresses to us. Cloudflare may also host stored files in future; we will update this page before that happens.
Google: if you sign in with Google. Google also stores your backup, if you choose "Back up to Google Drive": your device sends the sealed backup straight to your own Drive, and it never passes through us. It is sealed on your device with a recovery code or passphrase only you hold, so Google cannot read it either.
OpenAI: answers and speech-to-text for AI agents, as described above. It is the only AI provider we use.
Your browser's notification service (Google for Chrome and Android, Apple for Safari, Mozilla for Firefox): wakes your device when something arrives. It receives an empty signal, never any message text.
Apps you connect to an agent (such as a notes or task app), only when you connect them.
Some of these are outside India. We share only what each needs to do its job.
Google user data
This section covers what we do with information that comes from your Google account.
What we access
Sign in with Google: your name, email address and profile picture address.
Back up to Google Drive (optional, only if you choose it): access to the app's own hidden folder in your Drive (the
drive.appdatapermission). The app can see only the files it put there, and nothing else in your Drive.
How we use it
Name, email address and picture: to sign you in, to show your name and picture, and to decide whether to approve your request to join.
The Drive folder: only to save your backup and to bring it back when you ask.
We use it for nothing else. We do not use it for advertising, selling, credit or lending decisions, or building profiles.
Who it is shared with
Nobody, except the services that run Loamz Chat as listed in "Who else handles your data". Your Drive backup is not shared with us at all: your device sends it straight to Google, and it never passes through our servers.
We do not sell Google user data and we do not transfer it to data brokers.
How it is protected
Your backup is sealed on your device with a recovery code (or a passphrase you choose) that only you hold, before it leaves. So we, Google, and anyone who gets into your Drive cannot read it. The recovery code is kept on your device and is never sent to us or to Google.
We do not keep the Google access key for Drive. It stays in your browser until you close it or choose "Disconnect".
Our servers and database are protected as described under "Who else handles your data", and are reached only over encrypted connections.
Artificial intelligence
We do not use information from Google APIs to develop, improve or train any AI or machine-learning model, ours or anyone else's.
How long we keep it, and how to delete it
Name, email address and picture address: while your account is active. Closing your account (Settings, Your account) deletes them, as described under "Downloading and deleting your data".
Drive backup: it stays in your own Drive until you delete it there. Choose "Disconnect" in Settings, Backup and devices to stop the app using Drive, and remove the app's access at any time at https://myaccount.google.com/permissions. We cannot delete files in your Drive.
Loamz Chat's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How long we keep it
Chat entries: kept on our server, scrambled, for as long as the chat exists, so your devices can catch up. Our internal delivery queues are cleared after 7 days.
Files: kept, scrambled, until the chat is deleted or the account that sent them is closed. Each person may keep up to 100 MB of sent files on our server.
Sign-in and chat membership records: while your account is active.
Server logs: 30 days, then deleted.
Backups: daily copies for 7 days and monthly copies for a year. Something you delete can remain in a backup until that backup expires.
Agent data: until you delete it or close your account.
Your rights under the DPDP Act
You can ask us what data we hold about you and how we use it, ask us to correct it, ask us to delete it, name someone to act for you if you die or cannot act, and complain to our Grievance Officer. You can also complain to the Data Protection Board of India. To use any of these, write to the address below. We will reply within 30 days.
Downloading and deleting your data
Download: Settings, Your account, "Download my data" gives you what our chat server holds about you.
Close your account: Settings, Your account. This removes you from every chat, stops your devices, deletes chats where nobody else remains, deletes your directory entry, notification addresses, feedback and consent records, deletes everything your agents kept (conversations, notes, schedules, connected apps, files and settings), and deletes your sign-in account. Messages you sent stay in other people's chats as scrambled history, and files you sent stay in chats where others still use them, no longer linked to you. We cannot remove anything from other people's devices.
Children
Loamz Chat is for people aged 18 and over. We do not knowingly collect data from anyone younger. If we learn that someone under 18 has joined, we will delete the account.
If something goes wrong
If a security incident exposes your personal data, we will tell the people affected and India's Data Protection Board as the law requires, saying what happened, what was involved, and what we are doing.
Contact and grievances
Grievance Officer: Ravikumar Chavva
Email: privacy@loamz.com
Address: Bengaluru, Karnataka, India
For anything about these pages or the service in general, write to support@loamz.com.