Privacy Policy

Topia is an open, self-organizing network for mutual aid. We collect no personal surveillance data, sell no information, and run zero advertising trackers.

2. Data Processing in the App

• • Pseudonymous Identity: A handle and cryptographic keys (ECDSA P-256). No phone number or email address is collected.
• • Approximate Location: Processed only when activated. Public signals are fuzzed by ~150–200m to protect private addresses and cleared after 24h of inactivity.
• • Signals & Chats: User-initiated signals and messages. 1:1 chats can be end-to-end encrypted.
• • Transient Connection Data: IP addresses and nonces are processed purely in volatile memory to prevent replay attacks.

3. Mobile Push Services

To deliver notifications on mobile devices, we use Apple Push Notification service (APNs) and Google Firebase Cloud Messaging (FCM) using pseudonymous device tokens. No unencrypted chat text is forwarded.

4. No Trackers & Server Location

Topia operates with zero third-party advertising or analytics trackers. European servers are hosted in ISO 27001 certified data centers within Germany (EEA).

6. Your Rights & Local Storage

You have the right to inspect, update, or erase your data at any time. Cryptographic keys are held securely on your own device (localStorage / IndexedDB) to enable decentralized access.