This policy explains how Open Code ("we", "us") handles information when you use Max Messenger: the apps for Android, iPhone, Windows and macOS and the website maxmessenger.me ("Max"). It replaces the policy dated 11 August 2026. Our Terms of Service apply too.
In short
- One-to-one chats are end-to-end encrypted by default, so we cannot read them. Channels, public groups and chats where encryption is off are not, and our server stores their messages as readable text.
- Your phone number is your account and your address: the people you chat with, and members of the groups and channels you join, can see it.
- The phone apps (Android and iPhone) send the numbers in your address book to our server to find your contacts on Max. We do not keep them.
- We show no ads, sell no data, and the apps contain no analytics or tracking tools.
- You can ask us to delete your account at info@opencode-iq.com.
1Who we are
Max is made by Open Code. For any question or request about your information, write to info@opencode-iq.com.
2Your account
- Phone number. Your account is your mobile number, which is also your address on Max. The people you message, and members of the groups and channels you join, can see it.
- Signing in. We confirm the number is yours with a code, sent to a device you are already signed in on, or by SMS. With each sign-in request we also receive your device's name, the app's version and your language.
- Devices. We keep a list of the devices signed in to your account (device name, when it was added and when it was last seen), so that you can see and remove them in Settings → Linked devices. Signing in on a new phone signs the old phone out.
- Inactive numbers. If a number stays unused with Max for some time and is then registered again, the earlier account on it is deleted and a new one is created.
3Your profile
- Your name, photo and "about" line are shown to the people you chat with. Others who know your number may also be able to see them. On the phone you can limit your photo to your contacts.
4Your contacts
- With your permission, the phone apps (Android and iPhone) read the phone numbers in your address book and send them to our server to find which of your contacts use Max. Our server checks them against its list of accounts and does not save them.
- The contacts found are saved in your account's private storage on our server, encrypted with a key that only your devices have, so that your other devices show the same contacts.
- The desktop app does not read an address book. It uses the list your phone saved, and any numbers you paste in.
5Messages and end-to-end encryption
- End-to-end encrypted messages can be read only on the devices in the chat. We cannot read them.
- One-to-one chats are encrypted by default, and Saved Messages always is.
- A private group is encrypted when encryption is on for it: the phone apps turn it on for new private groups, and anyone in the group can turn it on.
- Channels and public groups are never end-to-end encrypted, and you can turn encryption off for a chat.
- The archive. Our server keeps an archive of your messages so that all your devices show the same history and can search it. Encrypted messages are stored as encrypted data that we cannot read. Messages from chats that are not encrypted are stored as readable text.
- We do not delete the archive on a schedule today. When your account is deleted, your archive is deleted with it; the copies kept in the archives of the people you messaged stay with them.
- Messages for a device that is offline wait on the server until it connects.
6Files, calls and locations
- Files you send are stored on our server and are not deleted on a schedule today. In encrypted chats they are encrypted too.
- Voice and video calls are encrypted.
- Your location is used only when you choose to send it.
7Notifications
- On Android (the Google Play version), Google's notification service (Firebase Cloud Messaging) wakes the app when a message arrives. The notification carries no message content.
- On iPhone, Apple Push Notification service delivers the notification, showing "New message" without the content.
- Our notification service stores the push tokens it needs to reach your device.
- The desktop app shows its own notifications and sends nothing to a push service.
8Read receipts, last seen and typing
- By default, your contacts see when you have read their messages, when you were last online, and when you are typing. You can turn off read receipts and last seen in Settings, and on the phone typing indicators too.
- Our server records the time of your last activity either way.
9Reports
- When you report a message, we receive the reported account and chat, your reason and note, and an excerpt of the reported message or its file name, so that we can review it. This applies to encrypted chats too, because you choose to share the message with us.
- Reporting an account sends no message content.
10Logs and security
- Our servers keep technical logs, such as IP addresses and connection times, to run Max, keep it secure and stop abuse. An automated filter screens for spam.
- Your devices reach our servers over encrypted connections. If you find a weakness, please tell us at info@opencode-iq.com.
11What we do not do
- We do not show ads, sell your information, or share it for marketing.
- The apps contain no analytics, tracking or advertising tools.
- We do not read end-to-end encrypted messages, and we could not if we tried.
12Who else is involved
- Service providers help us run Max, such as Google and Apple for notifications and their app stores, and the company that hosts our servers. Each receives only what it needs for its part.
13How long we keep information
- We keep your account, profile and devices while your account exists, and messages and files as sections 5 and 6 describe. Sign-in codes are kept only for a few minutes.
14Backups
- Desktop backups are files saved on your computer and encrypted with a passphrase you choose. We never receive them.
- Android may include the app's data in your Google backup, if your device encrypts its backups. On iPhone, your device's own backup settings (iCloud or a computer) decide whether the app's data is backed up.
15Your choices and rights
- Choose what others see in Settings → Privacy: read receipts, last seen, and on the phone your profile photo and typing indicators.
- Block anyone; our server applies the block. Delete messages you sent, and remove devices you no longer use.
- To get a copy of your information, correct it, or delete your account, write to info@opencode-iq.com with your account's phone number and full name. We will reply as soon as we can. Deleting your account removes your account's information from our servers.
16Children
- Max is not for children under 13. If you believe a child under 13 has an account, tell us and we will delete it.
17Changes and contact
- We will publish changes to this policy here with a new date, and tell you in the app before important changes take effect.
- Questions about this policy: info@opencode-iq.com.