Feature · Privacy

Your messages stay on your phone.

A messenger that knows what you’re saying in two languages shouldn’t feel like a surveillance camera. NatChatt is built so the people in a conversation are the only ones who have a copy of it.

In the app

Everything you control sits in one place.

Preferred language, notifications, blocked contacts, security and privacy, log out, delete account. The settings screen is plain on purpose. You can find what you need in a glance.

The NatChatt settings screen showing language, notifications, blocked contacts, app info, security and privacy, log out and delete account
A frosted glass padlock with a soft violet glow trapped inside, representing on-device message storage

Messages between NatChatt devices are end-to-end encrypted. The keys live on your phones. We can’t read what you write. We can’t produce your conversations on request from anyone, because we don’t have them.

For the translation itself, we send the text or audio of your message to Google’s Gemini API at the moment it leaves your phone. The API returns the translation. Under Google’s terms for the paid Gemini API, that request is not used to train their public models. We don’t hold on to the request or response on our side; the moment it’s delivered, our part of the trail is over.

You can delete a conversation, a thread, or your whole account inside the app. When you delete, the data goes with it; we don’t keep a shadow copy in case you change your mind. The same applies if you uninstall the app — your chat history lives on your phone, so when the phone loses it, it’s gone. An on-device export tool is on the roadmap so you can take a backup before deleting — it isn’t shipped yet.

We do log the bare minimum we need to run the service: how many requests your account made in a month, so we can bill it correctly. That log is dropped after ninety days.

The short version, in five lines.

  • Messages are end-to-end encrypted between devices.
  • Translations run through Gemini; we do not store the request or response.
  • We don’t use your private messages to train any model, ours or anyone else’s.
  • Your account log keeps only the numbers we need to bill correctly, dropped after ninety days.
  • Delete your account at any time. The contents go with it.