Privacy Policy

Privacy by design

Papelitos is a privacy-first messaging app. Messages and media are exchanged directly between users. We do not store message content or media on our servers.

Data we store

We only store the minimum data required to operate the service:

• Account data: username and a hashed password.
• Conversation metadata: conversation ID, members, pending invites, invite codes and expiration times.

Data processors

We use AWS as our sole data processor for hosting and storage.

Consent and deletion

Data sharing requires consent from both parties. When one user deletes a conversation, the conversation data is deleted for the other user as well. Users can delete all data by clicking “Delete” on the account page. No user data is retained after that.