Kanka privacy policy

Last updated: 7 November 2026

Kanka is a messenger that encrypts messages and calls end to end. This page says what is kept where, and who can see what.

Your account

We ask for no phone number, email or real name. The name you pick becomes your username with a random tag added. The server keeps your username, your public keys and when the account was made; your private keys stay on your phone only.

Messages, files and calls

Your messages, photos, videos, voice messages, files, places and link previews are encrypted on your phone; the server cannot read them. An encrypted message waits on the server at most 30 days and an encrypted file at most 3 days, until the other side fetches it, and is then deleted. Voice and video calls are encrypted between the devices; a call that cannot connect directly passes encrypted through Cloudflare's relay.

What the server knows

To deliver messages, the server knows your contact list and who sent a message to whom, and when; it cannot know what was written. For guard mode it keeps not your password but a value derived from it, sealed with a secret key, and the count of wrong attempts. To send notifications it keeps your phone's notification address (Firebase Cloud Messaging).

No logs

The server keeps no request logs: your IP address, when you connected and what you asked for are not recorded. For statistics, daily counts that belong to no one are kept (for example how many signed up, how many messages went). The one exception is there to make mass fake sign-ups harder: when an account is created, how many were created from the same address that day is counted under a hash of the address made with that day's own random salt. The address itself is not kept; the hash, the salt and the count are deleted when the day ends.

Service providers

The server runs on Cloudflare (Cloudflare, Inc., USA); your connections pass through Cloudflare's network, and Cloudflare's own security records follow its policy. Notifications go through Google Firebase Cloud Messaging and carry no content. A place is taken from your phone's own satellite fix; if you choose "Open in Maps", it goes to the maps app you choose.

Data on your phone

Your chats are kept on your phone in an encrypted database whose key is partly held by the server, so Kanka does not open without internet. Kanka keeps no backup: if your phone is replaced or lost, your chats go with it. The crash log stays on your phone, carries no message content and reaches us only if you share it.

Reports

If you report someone, we receive only their username and the reason you chose; not who reported, and no messages.

Email you send us

When you write to help@morpota.com, the sender address, name, subject and text of your email are kept only so we can answer you; attachments are not kept. Email passes through Cloudflare's email routing and is not linked to your Kanka account. It is kept at most a year and then deleted on its own.

Deleting your account

Settings → Gizlilik ve Güvenlik → Hesabı sil. Your account, your contact list and the messages and files waiting on the server are deleted, and your username becomes free. An account not opened for 180 days deletes itself. The chat stays on the phones of the people you talked to. Details: deleting your account.

Age

Kanka is not for anyone under 16.

Your rights

You have the right to ask about, correct and delete your personal data (KVKK and GDPR). You can delete your account and data yourself in the app.

To reach us: help@morpota.com

Changes

If this policy changes, the current version is published on this page.