StipaCaller — Privacy Policy

Last updated: 23 April 2026

StipaCaller is an invite-only personal messaging and calling app. This policy describes what data the app and its server handle, in plain terms.

What the server stores

• User identifier — a short handle you choose at invite redemption (e.g. lev). Not your real name unless you put it there.
• Display name — what other contacts see; you provide this.
• Public key — used by other contacts to encrypt messages to you. Public by design.
• Chat messages — stored on the server only as ciphertext that can be decrypted only by the intended recipient (X25519 crypto_box_seal). The server cannot read message content.
• Push notification token — a Firebase-issued device token so the server can wake your phone for new messages and incoming calls.
• Last-seen timestamp — used so we only resend missed messages, not your full history, on reconnect.

What the server does NOT store

• Your real name, email, or phone number — none are required.
• Your contacts list from your phone — we never read it.
• Your location — never collected.
• Any analytics, crash reporting, or advertising identifiers.
• The plaintext of your chats or call audio/video.

Calls

Voice and video calls use WebRTC. When direct peer-to-peer connectivity isn't possible, audio/video is relayed through our own TURN server. The relay carries opaque encrypted (DTLS-SRTP) bytes — the server cannot decode call media.

Push notifications

To wake your phone for new messages or calls, the server sends a notification through Firebase Cloud Messaging (Google). The push payload contains only a generic label ("New message" or "Incoming call") — never the sender's name or the message content. Google sees that your device received something, not what.

Data location and operator

The server runs in Amsterdam (DigitalOcean). The app and server are operated by Lesti Software Oy (Finland).

Data deletion

You can permanently delete your account from inside the app: Profile → Delete account. Account deletion is immediate and removes your user record, message history on our server, contact graph, and any invite codes you have issued. Alternatively, email lev@lestisoftware.fi from the address you registered with (or include enough information to identify your account); manual deletion happens within 30 days.

Reporting and moderation

Chat is end-to-end encrypted, so the server cannot read message content and cannot proactively filter it. Moderation relies on user- side actions: in-app Block and report (long-press a contact) prevents future messages and calls from a specific user and opens an email so the user can describe what happened. We review reports within 24 hours and, where substantiated, remove the offending user from the service. See the Terms of Use for the full policy.

Permissions the app requests

• Microphone — only during voice/video calls.
• Camera — only when you toggle video on during a call.
• Notifications — for incoming calls and messages.
• Network access — to reach the server.

Children

StipaCaller is not directed at children under 13 and does not knowingly collect data from them.

Changes to this policy

If this policy changes materially, the "Last updated" date above will reflect the new revision date.

Contact

Questions or requests: lev@lestisoftware.fi