Version 1.0.1 · Updated 3 November 2026
Language versions
German is the editorial source language of this notice. Each supplied language version provides the privacy information in that language. Mandatory language rights, statutory rights and disclosure obligations remain unaffected.
Scope
This policy applies to the Android app schukai Chat, package name com.schukai.chat. The app shows conversations from your Matrix accounts and, optionally, from Workspace connections in one shared list.
Controller and contact
schukai, Eichenstraße 26, 82290 Landsberied, Germany, is responsible for the app. Contact hey@schukai.com for privacy questions. The linked imprint contains the full provider identity and further contact details.
schukai runs no chat server or relay for the app. Your messages are held by the servers you connect. The respective server operator is responsible for these data; for a Workspace connection, this is the company that runs that Workspace. Its privacy notice also applies.
Matrix accounts
You sign in to a Matrix server of your choice with server, user ID and password. The app sends these details over HTTPS only to that server. It does not store the password. The app then exchanges conversations, participant details and messages with the server when you open conversations, load older messages or send a message yourself.
The app cannot currently decrypt messages in end-to-end encrypted rooms; it shows a notice there and sends no messages into such rooms.
Workspace connection
You can optionally connect the app to a company's Workspace by QR code, for example to answer website conversations. The app asks for camera access to scan the code. The camera image is evaluated on the device only and not stored. After you confirm in the browser, the app receives a session for this Workspace and exchanges the conversations you are allowed to handle there.
What stays on your device
The app stores sessions, loaded conversations, drafts and delivery states encrypted in its private storage, separately per account. Settings such as appearance, filters and language stay local. Android's automatic backup is disabled.
The app contains no advertising, no usage analytics and no tracking. It collects no location and no contacts and uses no push notifications. It needs internet access for connections and the camera for scanning QR codes.
Purposes and legal bases
schukai provides the app so that you can use your own accounts. Data are transmitted to the servers you connect at your request in order to use the chat service (Art. 6(1)(b) GDPR in relation to the respective server operator). schukai processes support details to handle your request.
Google Play
Google processes details about installation, updates and the store under its own privacy policy, including the international processing described there. Depending on your Android settings, Google may also receive crash and performance diagnostics.
Deletion
When you remove an account in the app, the app deletes its session, loaded messages and the related key on the device. You can also clear the history of a single account. Uninstalling removes all local data. Your account and messages on the server are not affected; contact the server operator for that.
Your rights
Subject to the legal requirements, you can request access, rectification, erasure, restriction and data portability and object to processing based on legitimate interests. You can lodge a complaint with a data protection supervisory authority.
Because schukai does not receive your messages, schukai can neither attribute them to a person nor disclose them. Direct requests about data on a server to its operator.
Changes
We update this policy before new data flows go into production, for example push notifications, file transfer or services run by schukai. The date at the top identifies the current version.
Further privacy rights and material changes
schukai does not sell personal data.
The data processing and contact channels described in this notice also apply when the app is used outside Germany. Mandatory rights under applicable privacy law remain available and are not limited to the GDPR rights expressly mentioned here. Depending on the applicable law and its conditions, these may include confirmation of processing, access, correction, deletion, anonymisation or blocking of data processed unlawfully or no longer needed, data portability, objection and withdrawal of consent. Requests concerning data processed by schukai can be sent to hey@schukai.com. You may also complain to a competent data protection authority.
Where the Brazilian LGPD applies to the processing, its rights remain available, including confirmation and access, correction, anonymisation, blocking or deletion of unnecessary, excessive or unlawfully processed data, statutory data portability, information about recipients and about the possibility and consequences of refusing consent, withdrawal of consent and consent-related deletion. Statutory exceptions and retention duties continue to apply. Requests can be submitted through the privacy contact above; the right to complain to the ANPD remains unaffected.
If the processing described here changes materially, we will expressly inform affected users about the change, when it starts, its consequences and the relevant rights. For changes to an app function, a prominent in-app notice will be provided before the affected processing starts. Where a service or support change also affects older app versions, we will additionally ensure suitable direct notice through an existing contact or service channel that may lawfully be used, in good time before the change starts. Quietly changing a website or merely publishing an update is insufficient for this purpose. Where consent is required, it will be obtained before the processing that depends on it. A privacy notice does not constitute agreement to a contractual amendment.