StipaCaller — Privacy Policy

Last updated: 27 October 2026

StipaCaller is an invite-only personal messaging and calling app. This policy describes what data the app and its server handle, in plain terms.

What the server stores

• User identifier — a short handle you choose at invite redemption (e.g. lev). Not your real name unless you put it there.
• Display name — what other contacts see; you provide this.
• Public key — used by other contacts to encrypt messages to you. Public by design.
• Chat messages — stored on the server only as ciphertext that can be decrypted only by the intended recipient (X25519 crypto_box_seal). The server cannot read message content. Encrypted messages are kept until the account is deleted.
• Photos, videos and voice messages — encrypted on your device before upload, stored encrypted for at most 7 days (UpCloud Object Storage, Helsinki, Finland), then deleted.
• Contacts and groups — who is connected with whom on StipaCaller, so messages and calls can be routed.
• Push notification tokens — device tokens issued by Google (Firebase) and Apple so the server can wake your phone for new messages and incoming calls.
• Activity times — when your app last reached the server and when it was last open. Contacts who also have you as a contact see "last active", unless you turn it off in Profile (which also hides theirs from you).
• Family plan (where available) — which family you belong to, the trial start, the "paid until" date, and the App Store or Google Play reference of the subscription, used to check it with the store. We never receive card or payment details: payment is handled entirely by Apple or Google under their own privacy policies.
• Technical logs and diagnostics — server logs record connections (including IP addresses) and which account messaged or called which account, with times; the app sends diagnostics about calls and app start-up (app version, phone model, operating system and related settings, such as battery optimisation). These never contain message content and are kept for a few weeks, to keep calls working and to fix problems.

What the server does NOT store

• Your real name, email, or phone number — none are required.
• Your contacts list from your phone — we never read it.
• Your location — never collected.
• Any advertising identifiers or third-party analytics or tracking.
• The plaintext of your chats or call audio/video.

Calls

Voice and video calls use WebRTC. When direct peer-to-peer connectivity isn't possible, audio/video is relayed through our own TURN servers. The relay carries opaque encrypted (DTLS-SRTP) bytes — the server cannot decode call media. Calls are not recorded or stored.

Push notifications

To wake your phone for new messages or calls, the server sends a notification through Firebase Cloud Messaging (Google, Android) or the Apple Push Notification service (iPhone). A message notification carries the message in its encrypted form, which only your phone can decrypt, together with the sender's display name so your phone can show who wrote or is calling. Google and Apple cannot read message content.

Data location and operator

The server, the call relay servers and all stored data are in Helsinki, Finland, hosted by UpCloud Ltd (Finland). The app and server are operated by Lesti Software Oy (Finland).

Data deletion

You can permanently delete your account from inside the app: Profile → Delete account. Account deletion is immediate and removes your user record, message history on our server, contact graph, family membership, and any invite codes you have issued. A store subscription is not cancelled by deleting the account: cancel it in your Apple or Google account settings. Alternatively, email lev@lestisoftware.fi from the address you registered with (or include enough information to identify your account); manual deletion happens within 30 days.

Reporting and moderation

Chat is end-to-end encrypted, so the server cannot read message content and cannot proactively filter it. Moderation relies on user- side actions: in-app Block and report (long-press a contact) prevents future messages and calls from a specific user and opens an email so the user can describe what happened. We review reports within 24 hours and, where substantiated, remove the offending user from the service. See the Terms of Use for the full policy.

Permissions the app requests

• Microphone — during calls and when you record a voice message.
• Camera — when you turn video on during a call or take a photo or video to send.
• Notifications — for incoming calls and messages.
• Network access — to reach the server.

Children

StipaCaller is not directed at children under 13 and does not knowingly collect data from them.

Changes to this policy

If this policy changes materially, the "Last updated" date above will reflect the new revision date.

Contact

Questions or requests: lev@lestisoftware.fi