Saved contacts require both people to agree. Names and contact access tokens are stored on your device. Our signaling service stores a random contact reference, hashed access tokens and approval status so you can reconnect while both apps are open. Removing or blocking a contact revokes this access; the server record is deleted within 24 hours. Unaccepted requests expire after one hour. Contact reports contain only the contact reference, reason and time, and are retained for up to 90 days. Received photos and videos stay hidden until you choose to view them. This is not automatic content detection.

Privacy policy

Korp Systems LLC FZ provides Message Korp and is responsible for its handling of personal data. Contact support@korpvpn.com; website https://korpvpn.com. This policy covers Message Korp, not other Korp products.

Your profile name, photo, saved messages and received media are stored on your device. Your chosen profile and content are shared with the person you connect to. Public room names are visible to people browsing rooms; private room codes should only be shared with intended recipients.

Connection services process IP addresses, room codes and names, temporary connection credentials and network negotiation information. Cloudflare provides the room directory, signaling, billing-state storage and TURN relay. Relayed media consumes data; WebRTC encrypts media in transit. The directory is not a cloud archive of your conversations or files.

For video access we store an installation identifier, free-call counts, subscription references, expiry dates and used minutes. IP-based registration limits help prevent abuse. Apple and Google process payments and supply purchase status for verification. We do not receive full payment-card details.

Camera and microphone access is used for calls, QR scanning or media you choose to capture. Photo access is used when you select an image or video. Background shutdown stops calls and transfers; small signaling messages can remain while connected.

We use these records to deliver the requested service, verify purchases, enforce allowances and prevent abuse. We do not use conversation content for advertising. Infrastructure and store providers may process service data internationally under their own privacy terms.

Local history remains until you clear it or remove app data. Clearing your device does not delete copies saved by the recipient or server billing records. Room records expire or are removed when closed. Billing and abuse-prevention records currently have no automatic deletion schedule; contact support to request access, correction or deletion. We may retain records required for legal obligations or resolving disputes and will explain any limitation to your request.

Do not send sensitive personal information in a public room name. You can revoke camera, microphone and photo permissions in device settings. Send privacy questions to support@korpvpn.com. Policy updates will appear at this address with an updated date.

Live rooms: video from a live room is relayed to viewers through Cloudflare's media servers and is not recorded. Room titles, display names, viewer counts and comments exist only while the room is open. If you report a room or comment, we store the room, the names involved, the reason and the reported comment for up to 90 days to review it.

Notifications: to ring you and show new-message alerts when the app is closed, your device's push token and a random pairing ID are stored on our server and sent to Apple Push Notification service or Google. Notifications say who is calling or that a message arrived; message text and media are never sent through push.