Plane Picker — Privacy Policy

Effective date: 29 May 2026 · Applies to the Plane Picker app on iOS and Android.

Plane Picker is a serverless, peer-to-peer messenger. It has no backend servers, and the developer does not collect, store, or transmit any of your personal data. Everything happens on your device and directly between nearby devices.

The short version

• No account, no sign-up, no email or phone number required.
• No servers. Your messages travel directly device-to-device over Bluetooth (and, where available, Wi-Fi Aware).
• Messages are end-to-end encrypted — only the members of a chat can read them.
• No analytics SDKs, no advertising, no third-party trackers.
• The developer cannot see your identity, contacts, or messages, because none of it is ever sent to us.

What is stored, and where

The following are created and kept only on your device:

• Your identity — a nickname, an avatar choice, and a cryptographic key pair generated on first launch. Private keys are held in the device’s secure storage (iOS Keychain / Android Keystore).
• Contacts — the public identity (nickname, avatar, public keys) of peers you have met over Bluetooth.
• Chats and messages — the rooms you join and the messages exchanged in them.

This data never leaves your device except as encrypted messages sent directly to the other members of a chat. We receive none of it.

How messages travel

Plane Picker discovers nearby devices over Bluetooth Low Energy and relays messages directly between them (a local mesh). Message contents are end-to-end encrypted using standard algorithms (Ed25519, X25519, AES-256-GCM, HKDF-SHA256). There is no central server that can read, log, or retain your messages.

Device permissions

• Bluetooth — to find nearby Plane Picker users and exchange messages with them. Not used for tracking or advertising.
• Camera — only to scan an invite QR code. Frames are processed on-device and are never stored or transmitted.
• Notifications — to let you know when a new message arrives.
• Local Network (iOS) — used only for the optional higher-speed Wi-Fi Aware link between nearby devices.

Analytics and diagnostics

Plane Picker uses no third-party analytics, advertising, or crash-reporting services. Any diagnostic information (for example, crash reports gathered by the operating system’s built-in tools) remains on your device and is not sent to the developer.

Blocking and reporting content

Because there is no server, moderation happens on your device. You can block any sender; blocked senders’ messages are dropped on your device. You can also report a message: doing so opens your email app with a pre-filled message to the developer that contains only the reported message’s identifier, the sender’s public key fingerprint, and the chat name. This email is sent only if you choose to send it, and the developer receives only what that report contains.

Children

Plane Picker is not directed to children. In any case, the app collects no personal information from anyone.

Your control and data deletion

All of your data lives on your device. You can erase it at any time: use “Reset identity” in Settings, or delete the app. Because the developer stores none of your data, there is nothing for us to delete on your behalf.

Changes to this policy

If this policy changes, the updated version will be posted at this address with a new effective date.

Contact

Questions about this policy or about content reports: pickerdotcom@gmail.com.