From 9fe6be2e2b189fbf16e3c2fd492d288e14f91885 Mon Sep 17 00:00:00 2001 From: Greg Slepak Date: Fri, 2 Aug 2024 21:48:54 -0700 Subject: [PATCH] update privacy policy to make it clearer that mobile push notifications will be encrypted too --- src/pages/privacy-policy.astro | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/pages/privacy-policy.astro b/src/pages/privacy-policy.astro index 65b496e..a9771b5 100644 --- a/src/pages/privacy-policy.astro +++ b/src/pages/privacy-policy.astro @@ -57,7 +57,7 @@ import Layout from '../layouts/DefaultLayout.astro'

Group Income does not share your data with any third-party service, and therefore we have no need of such agreements.

As mentioned in previous sections, the data in public unencrypted chatrooms is public and should be treated with the same care and expectations of privacy that you should have with normal social media: that is, you should have zero expectation of any privacy for the content you post to public chatrooms. By default, chatrooms are non-public, and like direct messages, they are end-to-end encrypted.

-

Certain possible future features might necessarily require some of your data passing through third-party servers. For example, certain types of notifications (mobile push notifications and emails) require that data travel from our server to another before it reaches you, and in the process this data could be read by those servers. As far as we are aware, no end-to-encrypted alternatives to such services exist. If you are aware of any, please let us know.

+

Certain possible future features might necessarily require some of your data passing through third-party servers. For example, while we can end-to-end encrypt some types of notifications (push notifications), other types such as email are more difficult to encrypt. We will update this privacy policy in the future as necessary to give any disclosures should we choose to implement email notifications (or other notifications) that cannot be encrypted. In all cases, such notifications will be opt-in on the part of the user.

Note On Public Chatrooms

@@ -106,7 +106,7 @@ import Layout from '../layouts/DefaultLayout.astro'

Nobody. If we are forced by a court to share information with a government body, the data we can share with them is described above in the section "Note On Metadata".

-

Future features that cannot avoid using third-party services (e.g. email or mobile push notifications) may necessarily expose limited data to some third-party providers should users choose to enable such features. See the section above on third-party agreements for more details.

+

Future features that cannot avoid using third-party services (e.g. some types of notifications) may necessarily expose limited data to some third-party providers should users choose to enable such features. See the section above on third-party agreements for more details.

Please bear in mind, everyone you've authorized to read your messages (e.g. the other people in your group), clearly have access to whatever information you choose to disclose or share with them, and information shared in public chatrooms is… public (see section "Note On Public Chatrooms").

Group members can read the information in the group because they share a secret key. Again, this secret key is available only to group members, not us. Similarly, direct messages can only be read by sender and recipient.