Privacy summary

This is a plain-language privacy summary based on how the app works. It is not a legal agreement.

What stays on your phone

Posts, messages, photos, voice notes, your profile and your encryption keys are stored on your phone. DIRECT has no servers and no accounts; content only moves to other phones over Bluetooth.

What other phones receive

Posts you publish are shared with phones you sync with and can be passed on to further phones (multi-hop sync). Messages to a connected phone travel over an encrypted link (AES-GCM 256).

Internet use

The only internet connection is the built-in updater, which reads version.json and downloads the APK from direct-x-app.vercel.app. Like any web request, this is visible to the hosting provider.

Permissions

Bluetooth and nearby-device access for connecting and syncing; location only on Android 11 and older because those versions require it for Bluetooth scanning; the microphone for voice notes and calls; notifications and full-screen alerts for messages and calls. The full list is in the documentation.

This website

The website keeps two anonymous counters: page visits (at most one per browser per day) and clicks on the APK download button. Only the date and the event type are stored, with no IP address, no identifiers and no cookies; a small flag in your browser's local storage prevents counting the same visit twice. The app itself is not affected and sends nothing.