Privacy policy
Last updated 30 October 2026
Walnet is an app for calls, chat and file sharing between your own devices and people you invite. It is published by DR-ESK LLC ("we"). This policy covers the Walnet app for Android and our server at walnet.app.
In short: your calls, messages, voice messages, photos and files go directly between devices, encrypted. They are not sent to us and we cannot read them. Our server only helps devices find each other. No ads, no analytics, no selling data.
What our server keeps
| Data | Why | Kept |
|---|---|---|
| A random identifier the app creates on your phone. Not linked to your name, email or phone number | To route calls and rooms to you | Until you delete your account, or 12 months after your device last connected |
| A push notification token | To wake your phone for an incoming call or message | |
| Which rooms you belong to | To connect you to the other members | |
| How much data our relay carried for you, per 30-day period (an amount, not the content) | To apply the relay's fair-use allowance | |
| Invitations you create or accept | To let people join a room | Until used, at most 7 days |
| Your IP address, in server logs | To run and protect the service | About a month |
During call setup the server passes technical connection details between the two devices and does not keep them. Your username, room names and profile picture go device to device to the other people in your rooms; they are not stored on our server.
What we never receive
The content of your calls, messages, voice messages, photos and files. These travel directly between devices over encrypted connections. When a direct connection is not possible they pass through a relay server, still encrypted.
Optional features
- Developer mode (off by default). While it is on, the app sends connection diagnostics to our server: your username, device model, the last four characters of your device identifier and the room. We use them only to fix problems and delete them after 30 days. Turning developer mode off stops this.
- Emailing logs (developer mode). Your email app opens with the app's logs attached; nothing is sent unless you send that email. The logs can contain usernames, room names, your device model and network addresses. We use them only to fix problems.
- Network Paths map. The app can download a location database from walnet.app; looking addresses up happens on your phone. The map pictures come from OpenStreetMap, which receives your IP address and the area you view (their policy).
Other services involved
- Google Firebase Cloud Messaging delivers the wake-up notifications. A notification contains only a room identifier and the sender's random identifier, never message content.
- STUN servers (ours, Google's and Cloudflare's) help find a working network path and see your IP address.
- Google Play services' code scanner reads invite QR codes; the camera image is processed on your phone.
If you point the app at your own server or relay in Settings, that server replaces ours.
Deleting your account
In the app: Settings > Delete my account. Everything our server holds for your account is deleted straight away: you are removed from every room, and rooms you created are deleted for everyone in them. The app then erases everything it stored on your phone. Uninstalling the app removes the data on your phone; what our server holds is then deleted after 12 months.
Children
Walnet is not directed at children under 13.
Changes
If this policy changes we will update the date at the top, and say so in the app for significant changes.