This Policy explains what data Link Messenger (“we”) receives when you use the app and the website, why we need it and what you can do about it. We tried to write it without legal fog: if any part is unclear, write to us at support@linkmessenger.me and we will fix the wording.
In short#
- Private chats and calls are protected by end-to-end encryption using the Signal protocol. We cannot read or listen to their content, and we do not store your conversations on our servers.
- Users without Premium may see internal Link ads. We do not use third-party advertising networks or sell your data.
- We ask for the minimum: all you need to create an account is a phone number.
- Public stays public: posts, short videos, stories and comments are stored on our servers in ordinary form — otherwise there would be no way to show them to other people.
- You can delete your account, along with its content, at any time.
What data we receive#
Phone number. This is your login. We need it to create your account, restore access and let friends find you. You decide yourself who can see the number.
Profile. Name, @username, photo, bio, link and location — everything you fill in yourself. Other people see this data according to your privacy settings.
Contacts. If you allow access to your address book, the app checks it against the service to show which of the people you know are already on Link. Numbers are sent in transformed form, and we do not keep your address book. You can refuse access — search will then work by phone number and username.
Messages and calls. Private chats and calls are protected by end-to-end encryption using the Signal protocol — the same one Signal and WhatsApp are built on. The encryption keys exist only on the devices of the people talking; we do not have them. We do not store your conversations on our servers. An encrypted message passes through the server only on its way to the recipient and is deleted right after delivery; if the recipient stays offline for a long time, undelivered messages are removed automatically. We cannot read or listen to the content of chats and calls — neither in transit nor on request.
Publications. Posts, short videos, stories, comments, reactions and follows are stored on our servers in the clear — this is an ordinary social service, not a private chat. Anything you delete disappears from the feed immediately and is erased from storage.
Device data. Model, OS and app version, language, push notification identifier, list of active sessions. We need these to deliver notifications, sync between devices and protect your account — you can see that list in the settings and end any session.
Technical information. Connection IP address, connection time, crashes and errors. This helps us keep the service alive, catch attacks and fix failures.
Payments. Purchases of Premium, gifts and super likes go through the App Store and Google Play. We receive the fact of a purchase, its type and the transaction identifier; payment credentials are never passed to us — the app store handles them.
Verification. If you request a verified badge, you send us a document and a selfie. This is sensitive data, so we process it only with your explicit consent — you send the request yourself — and only to confirm your identity. We share it with no one and delete it within 30 days of the decision, whether or not the badge was granted.
Support requests. The text of your message, your contact details and any attached files — so that we can look into your case.
What we do not do#
- We do not read or store the content of private chats and calls.
- We do not use third-party advertising networks or share your data with them. Internal Link ads are shown only to users without Premium.
- We do not sell or rent out personal data.
- We do not build an advertising profile of you and do not track you across other websites.
Why we process data#
We use data only to make the service work: deliver a message, connect a call, show the feed, process a payment, tell a real person from a spam bot and protect accounts from being broken into. Separately — to comply with legal requirements where they apply to us.
Who we share it with#
Infrastructure providers. These are companies that process data on our instructions and may not use it for their own purposes:
- Amazon Web Services and Google Cloud Platform — hosting and data storage;
- Google (Firebase) — delivery of push notifications, crash reports and usage statistics. Firebase assigns an identifier to the app installation and receives the IP address; we look at this data only in aggregate and never link it to the content of chats;
- Apple — push notifications on iPhone and iPad;
- App Store and Google Play — processing payments.
When the law requires it. We answer official requests if they are lawful and properly served. We cannot hand over the content of conversations: we do not have it.
No one else. There are no advertising partners or data brokers on this list, and none will appear without your consent.
Where data is stored#
Data sits on our own servers in data centres in the countries where Link has the most users, as well as in the Amazon Web Services and Google Cloud Platform clouds. This means your data may physically be located outside the country where you live.
Beyond the circle of providers listed in “Who we share it with”, data does not travel: we do not pass it to other companies, sell it or rent it out.
If the service changes owner#
If Link is sold, merged with another company or reorganised, user data will pass to the new owner together with the service. They will be bound by this Policy; if they want to handle data differently, we will tell you in advance — and you will be able to delete your account before the changes take effect.
How long we keep it#
| Data | Retention |
|---|---|
| Conversations | Not stored on our servers |
| Undelivered message | Encrypted until delivery, then deleted automatically |
| Posts and stories | Until you delete them; stories — 24 hours |
| Account data | As long as the account exists |
| Account after a deletion request | One month to restore it, then permanent deletion |
| Verification materials | 30 days after the decision on the request |
| Payment records | As long as accounting and tax law requires |
What you can do#
- Adjust privacy. Who sees your number, profile photo and last seen time.
- Turn on disappearing messages — in every chat or in one.
- Block and report any account.
- Manage sessions — see every device and disconnect the ones you do not need.
- Delete your account. In the app settings, without contacting support; if you do not have the app at hand, by writing to support. After the request the account stops working, but you have a month to change your mind: sign in with the same number and the account comes back. If you do not return within a month, it is deleted permanently, together with your profile and publications.
- Request a copy of your data, correct it or ask what we hold about you — by writing to support@linkmessenger.me. We reply within 30 days.
- Contest an automated decision. Some blocks and restrictions are applied automatically. If you disagree with a decision, write to us — a person will review it, not an algorithm.
Children#
Link Messenger is intended for people aged 13 and over. Where local law requires a higher age for consenting to data processing on your own, that law applies: in the countries of the European Economic Area this is usually 16, and 13, 14 or 15 in those where national law has lowered the threshold.
If you are below the age that applies to you, you may not use the service. Accounts we learn to belong to children under that age are deleted together with their data.
Material that exploits children is banned outright: such accounts are blocked without warning, and the material is passed to specialised organisations and law enforcement. You can report content like this with the “Report” button in the app or by writing to support@linkmessenger.me — we handle those reports first.
The website#
linkmessenger.me has no visitor counters, advertising pixels or trackers. The site remembers only two things in your browser: the language and the colour theme you chose — they are sent nowhere and exist so that your next visit opens the version you are used to.
Security#
Private chats and calls are protected by end-to-end encryption using the Signal protocol. The connection to our servers is additionally encrypted at the transport level. A backup copy of your conversations can be protected with a password that only you know. Employee access to systems is limited and logged.
No service can promise absolute safety. If a breach occurs that affects you, we will tell you within 72 hours of learning about it — and explain exactly what leaked and what to do.
Changes#
We will update this Policy as the service develops. We will show significant changes in the app or on the website before they take effect. The date of the last update is given at the top of the document.
This document exists in several languages. If the translations differ, the Russian version prevails — it is the original.
Contact#
Privacy questions, data requests and complaints: support@linkmessenger.me.