Privacy Policy

1. The short version

Capy has no accounts, no ads, no analytics and no tracking, and no server that can read your rooms. Your messages, calls, files, transcripts and minutes stay on the devices of the people in each room and travel between them, encrypted, directly whenever the devices can reach each other. Two always-on helpers run by the team, a blind peer and a blind relay, only ever handle encrypted data they can't read (sections 5 and 6). The app makes no web requests: it talks only to other peers. We, the team that publishes Capy ("Capy", "we", "us"), never receive your content. Beyond what the blind peer and relay see (sections 5 and 6), the only thing that ever reaches us is a feedback or bug report you choose to send.

This policy covers the Capy desktop app and this website.

2. What we never collect

We don't collect, store or have access to:

• your 24 recovery words or your keys;
• your messages, calls, voice, video, screen shares, files, photos, recordings, transcripts, captions, minutes, tasks or canvases;
• your rooms, their members, your contacts or who you talk to;
• usage analytics, telemetry, advertising identifiers or crash reports you didn't send.

3. What stays on your device

Capy keeps its data in its own folder on your computer:

• Your identity: the 24 words, in a file only your user account can read. Logging out makes the device forget them.
• Your rooms: their messages, files, profiles, receipts, meetings, tasks, canvases, transcripts, minutes and insights, as the room's members share them.
• Message keys: each message is sealed with a key of its own, kept apart from the room so a delete can destroy it.
• On-device AI data: the speech and language models, and the search index of your rooms' transcripts and minutes.
• Settings: theme, language, notifications, audio and video devices, privacy switches.

You can remove a device's copy by logging out and deleting Capy's folder, or by uninstalling the app. A secure room keeps its key, its network's key pair and what it needs to open again in one file (readable only by your user account) in the room's own folder on this device, until the room is erased: when its call ends (by default), when its time is up, when its owner erases it, or when you log out. Then the folder is purged and removed.

4. What the people in your rooms receive

Everyone in a room receives what is shared there, and keeps a copy on their device:

• your profile: name, colour, optional photo and status;
• your messages, reactions, files, voice and video messages, and what you say in calls (as audio, and as the transcript your own computer makes, if transcription is on);
• whether you are online and typing, and read receipts. You can turn these off in Settings → Privacy & security.

Room members can save, copy, screenshot or record what they receive. Choose who you invite.

5. The peer-to-peer network

Capy finds other people's devices through a public distributed hash table (HyperDHT) and connects to them directly, with end-to-end encryption.

• Devices you connect to, and nodes of the network that help connect you, can see your IP address.
• When two devices can't connect directly, a blind relay run by us passes their traffic along. The traffic is end-to-end encrypted, so the relay can't read it. It can see the IP address of the devices that use it, how much data passes and when.
• To find a room, your device announces a short code derived from the room's key. It doesn't reveal the room's name or content. Secure rooms announce nothing.

6. The blind peer

To keep rooms available while their members are offline, Capy copies every room to a blind peer, an always-on peer run by us and set in the app's own configuration. It holds only encrypted data: it can't read messages, files or names. It can see the IP address of the devices that connect to it, how much data it stores and when. Secure rooms are never copied to it.

7. On-device AI

Transcription, captions, translation, minutes, tasks and answers are produced by AI models running on your computer. Your voice and your rooms' text never leave your device for this. The models are downloaded once from the QVAC model registry over the same peer-to-peer network, so the peers that serve them can see your IP address and which models you downloaded.

8. Updates

Capy checks for and downloads new versions over the peer-to-peer network from peers that seed them. Those peers can see your IP address and which version you download.

9. Feedback and bug reports

Only if you send one, a report reaches us, through Settings → Help & feedback. Before sending, the app shows you exactly what goes:

• what you typed;
• for a bug or an error, if you choose: a screenshot of the Capy window, and diagnostics: app and system versions, a few settings, and recent errors.

Before a report is sealed, Capy removes your words, keys, invites, links and file paths from all of it, and from the diagnostics also the names of the people and rooms it knows (names you type yourself stay, since you wrote them to us). It is then encrypted so only our inbox can open it, and sent directly to it over the peer-to-peer network. Nothing is captured or sent while a secure room is open. We use reports only to understand and fix problems, and keep them only as long as we need them for that.

10. This website

This website uses no cookies, no analytics and no third-party trackers. The servers that host it may keep standard access logs, such as IP address, browser and pages requested, for security and reliability.

11. Children

Capy is not meant for children under 16, or under the age of digital consent where they live if it is higher. We don't knowingly receive data from children.

12. Your rights

Data protection laws such as the GDPR in Europe and the LGPD in Brazil give you rights to access, correct, delete and port your personal data, and to object to its processing. Because your content lives on your devices and not with us, you exercise most of these directly in the app: edit your profile, delete your messages, remove devices, log out, or delete Capy's data. For feedback reports you sent us, write to us and we will answer, and delete them when asked. You can also complain to your data protection authority.

13. Security

Capy encrypts connections end to end, signs every record with the author's identity and checks it on every device, seals each message with its own key, and keeps its windows from making web requests. No system is perfectly secure: keep your devices updated and locked, and your 24 words private.

14. Changes

We may update this policy. We will change the date at the top and, for important changes, tell you in the app or on this website.