DE EN

Responsible for the "kurznachricht" app and this website:

Rafael Perez Süess
Böcklinstrasse 39
8032 Zürich, Switzerland

The app and the accompanying server offered here are intended for testing and demo purposes only — in particular for anyone interested in an on-premise solution. There is no entitlement to productive operation.

The "kurznachricht" app is provided "as is", without any representation or warranty of any kind. Use is at your own risk and responsibility.

The provider gives no guarantee of continuous availability, freedom from errors, timeliness or completeness of the service. To the extent permitted by law, all liability for damages of a material or immaterial nature arising from the use or non-use of the app or from access or lack of access to the service — including loss of data — is excluded. Liability for unlawful intent or gross negligence remains reserved (Art. 100 Swiss Code of Obligations).

The provider reserves the right to change, interrupt or discontinue the service at any time without notice. Users are solely responsible for the content they exchange through the app; the provider does not review content — and, due to end-to-end encryption, technically cannot.

References to third-party websites are outside the provider's responsibility. Swiss law applies; the place of jurisdiction is the provider's registered office.

This privacy policy explains, in accordance with the Swiss Federal Act on Data Protection (nFADP), which personal data is processed when you use the "kurznachricht" app.

1. Controller

The controller is the provider named in the legal notice.

2. What we store

We do not store message content in readable form. The server stores only:

• Profile data (plaintext): phone number, display name, avatar, public key and push token — required to operate the service.
• Messages and images (ciphertext only): end-to-end encrypted; the server cannot read the content. They are irrevocably deleted server-side after 10 days at the latest.
• Technical logs: server logs required for operation and security (e.g. IP address, timestamp), deleted regularly.

Private keys never leave your device (Keychain/Keystore). Decryption of content by the provider is technically impossible.

3. Hosting

Data is stored on the kurznachricht server at Infomaniak in Switzerland. For self-hosted (on-premise) installations, data resides on the operator's own infrastructure; that operator is responsible for its own data processing.

4. Third-party services

• aspsms.ch (Switzerland): sends a single verification SMS during onboarding. Your phone number is transmitted for this purpose.
• Google Firebase Cloud Messaging (FCM): delivers a content-less wake-up push. The payload contains only the sender ID and recipient ID — no message content. Data may be transferred to the USA; Google is certified under the Swiss–U.S. Data Privacy Framework.

We use no other third-party services, no advertising, no tracking and no analytics.

5. Your rights

You have the right to information about your personal data and to its correction or deletion. When you delete your account, all profile data stored server-side is removed; encrypted content is deleted at the latest after the 10-day retention period. Please direct requests to the contact address in the legal notice.

6. Changes

This privacy policy may be amended at any time. The version published on this page applies.

Last updated: July 2026