◆Pairlink

Privacy Policy

Effective date: October 24, 2026

In short: Pairlink has no accounts. The content of your messages, voice and video never passes through a server; it travels directly between two devices, end-to-end encrypted. We cannot see, store or share it.

1. Who is responsible

This policy applies to the Pairlink mobile app (iOS and Android) provided by Caliptic. Contact: info@caliptic.com.

2. Data we do not collect

  • We do not ask for an account, name, phone number, email address or password.
  • We do not collect or store message, voice or video content; we have no technical access to it.
  • We do not read your contacts, location or advertising identifier.
  • The app contains no analytics, advertising or tracking tools.

3. Data that stays on your device

  • Device identity: on first launch the app generates a key pair on your device. The private key is kept in the device's secure storage (iOS Keychain, Android Keystore) and never leaves the device.
  • Pairings: the device identities of people you paired with by QR, and the encryption key unique to each pairing, are stored only on your device. Names you give to contacts are visible only to you.
  • Chat history: kept only on your device, in the app's private folder. You can clear it from the chat screen or remove it entirely by deleting the conversation.
  • Diagnostic log: a small on-device log used to troubleshoot connections (connection states and error messages; no content or keys). It is never sent anywhere.

4. Information that crosses the network while connecting

Content goes directly from device to device, but some technical connection information crosses the network so that the two devices can find each other:

  • The other device: by the nature of a direct connection, the device you paired with sees your IP address.
  • STUN (Cloudflare): your device sends a short request to stun.cloudflare.com to learn its internet address. That server sees your IP address and port, not content.
  • Reconnect mailbox (Cloudflare Workers): so that devices can reconnect without a QR code after the app is closed and reopened, they leave connection information (a session description), encrypted with the pairing key, in a mailbox we operate, for at most 3 minutes. The mailbox address is an unguessable digest derived from the pairing key and contains no group or contact names. We cannot open this information. As the hosting provider, Cloudflare may process the IP addresses of requests under its own policy.

The mailbox is not polled while the app is in the background.

5. Purchases

Subscriptions and lifetime purchases are made through the Apple App Store or Google Play. We do not receive your payment details. Your entitlement is verified on your device using the store's signed records; there is no server of ours that learns your identity. The stores provide us only with aggregated sales reports.

6. Permissions

  • Camera: to scan QR codes and for video calls; it is turned on only when you start it.
  • Microphone: for voice and video calls.
  • Local network (iOS): for a direct connection to a device on the same network.

7. Retention and deletion

All data is on your device. Deleting a conversation removes that pairing, its key and its chat history from your device. Deleting the app removes the app's data; on iOS, Keychain items may remain for some time according to operating system rules. Encrypted information in the reconnect mailbox is deleted automatically after at most 3 minutes.

8. Your rights

To exercise your rights under the GDPR or Türkiye's KVKK, write to info@caliptic.com. Because we do not keep your personal data on our servers, most requests will be answered with the fact that the data is only on your device.

9. Children

Pairlink is not intended for children under 13.

10. Changes

If we update this policy we will change the effective date, and we will announce significant changes in the app.