Last updated: August 2026
DUNNO is a private messenger that does not operate a central messaging server. Messages are sent peer-to-peer over the Tor network and are end-to-end encrypted. We do not collect, store, or share your personal data, messages, contacts, or metadata. The only personal data we process is what is strictly necessary to sell you a license or subscription — and even that is kept to an absolute minimum, as described below.
DUNNO is distributed in two editions, both covered by this policy:
All data — messages, contacts, keys, and settings — is stored exclusively on your device in an encrypted database (SQLCipher, with keys protected by Android Keystore). No copy is sent to any server. If you delete the app, all data is lost unless you have manually created an encrypted backup via Settings → Data → Export backup. The backup file is encrypted with a password you choose and is stored wherever you save it — we never see it.
Chat and walkie-talkie (PTT): All chat messages, voice, and PTT audio are transmitted peer-to-peer over the Tor network. Your IP address is hidden by Tor. No central server relays or logs these messages.
Fast Call (WebRTC): Fast Call uses a STUN/TURN server on the public internet to establish a direct or relayed audio connection. The STUN/TURN server may see your IP address transiently during call setup. No call audio, metadata, or identifying information is logged or stored by the TURN server. Audio is end-to-end encrypted (DTLS-SRTP).
Video call: Video calls use a signalling server operated by the developer (wss://assistant.eelke-sp.cc) to set up the peer-to-peer connection. This server transiently sees your public key, the time you connect, and technical WebRTC metadata. No call data is logged or stored, and video and audio remain end-to-end encrypted — they never pass through the server.
Google Play edition. Subscriptions are processed entirely by Google Play Billing. Google — not the developer — receives and processes your name, email address, and payment details under Google's own privacy policy. The developer receives only a purchase token and your subscription status (active/expired), which is used solely to unlock functionality on your device. No payment data ever touches our systems.
DUNNO Direct (website). One-time purchases are processed by our payment provider, BTCPay Server. You can pay in cryptocurrency without creating an account. Please note:
DUNNO does not collect or transmit:
Where we process personal data, we do so on the following legal bases: performance of a contract (delivering your license or subscription), legal obligation (tax records), and legitimate interest (short-lived server logs for security and abuse prevention). Retention periods are stated in the relevant sections above; where no period is stated, data is not retained at all. We do not sell data, do not share data with third parties for their own purposes, and do not transfer data outside the EU, except that Google may process Play Billing data under its own international framework as an independent controller.
Under the GDPR you have the right to access, rectify, or erase your personal data, to restrict or object to processing, to data portability, and to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). Because we store almost no personal data — and no message data whatsoever — most requests will simply be answered with confirmation that no data exists. For purchase-related data, contact us at the address below.
DUNNO is not directed at children under 13. We do not knowingly collect any information from children.
DUNNO uses the following third-party services and open-source components. None of them collect data on our behalf:
If this policy changes, the updated version will be made available in the app (Settings → Legal) and at this address. For material changes affecting paying users, reasonable notice will be given.
For privacy questions or to exercise your rights, contact the developer via the email address listed on the Google Play Store listing or on the purchase page.