Privacy Policy

Last updated: August 2026

Lepus is a messaging application. This policy describes what data we collect, how we use it, and your rights.

Data We Collect

How We Use Your Data

Data Sharing

We do not sell, rent, or share your personal data with third parties. Data may be disclosed only if required by law.

Data Retention

Your data is stored on our servers. Messages, media and other content you delete are hidden from all users but are retained on our servers. Messages you sent remain visible to the other participants of your chats after your account is deleted, but are no longer associated with your identity.

Account Deletion

You can delete your account at any time from the app settings. Deletion anonymizes your profile (username, name, bio, avatar are removed), signs you out on all devices and revokes your sessions, login keys and push tokens. Your account cannot be restored after that. Messages you sent stay in the chats of the people you talked to, without your name.

Cookies

Lepus does not use cookies. Authentication is token-based.

Security

Connections are encrypted via TLS. Passwords are hashed using PBKDF2-SHA256. We take reasonable measures to protect your data, but no system is completely secure.

Children

Lepus is not intended for children under 13. We do not knowingly collect data from children under 13.

Changes

We may update this policy. Continued use of the app after changes constitutes acceptance.

Contact

Questions or requests: [email protected]