Your conversations belong to you. BongoChat uses end-to-end encryption to ensure your messages remain private and are never stored on our servers.
Last updated: June 19, 2025
End-to-End Encrypted
Your chat messages, calls, and shared media are protected by end-to-end encryption. BongoChat cannot read your conversations — and never will.
Welcome to BongoChat! We are a Bangladesh-based social communication platform committed to protecting your fundamental right to privacy. This Privacy Policy explains what personal data we collect, how we use it, and the measures we take to safeguard it, in compliance with the Digital Security Act 2018, Personal Data Protection Act 2023 (PDPA) of Bangladesh, and other applicable laws.
Most importantly: BongoChat does not store, collect, or have access to the content of your chat messages, voice calls, or video calls. All conversations are protected by end-to-end encryption (E2EE), meaning only you and your intended recipient can read or hear them. Not even BongoChat can decrypt your communications.
BongoChat follows the principle of data minimization. We only collect information that is strictly necessary to provide and improve our services. We do not collect, store, or process the content of your encrypted communications.
Account Registration Data
Your name, email address, phone number, and profile photo that you voluntarily provide during sign-up. This information is necessary to create and maintain your account and to help other users identify you on the platform.
Profile & Preference Data
Bio, status messages, and app preferences such as language selection, notification settings, and theme choices that you configure to personalize your experience.
Support & Feedback Data
Information you provide when contacting our support team or submitting feedback, including the contents of your communication with us and any attachments you choose to share.
Device Information
Device model, operating system and version, app version, battery level, and network type (Wi-Fi/mobile). This data helps us ensure compatibility and optimize app performance across different devices.
Log Data
IP address (temporarily logged and not permanently stored), connection timestamps, and basic usage metrics such as frequency of app launches and feature usage patterns. This data is aggregated and anonymized for analytical purposes.
Crash & Performance Data
Anonymous crash reports and performance diagnostics that help us identify and fix bugs, improve stability, and enhance the overall user experience.
Your chat messages, voice calls, and video calls
These are end-to-end encrypted and exist only on your device and your recipient's device. BongoChat servers relay encrypted packets but cannot decrypt or read them.
Your shared media files
Photos, videos, documents, and voice notes sent in chats are encrypted in transit and at rest. They are stored only on the sender's and recipient's devices, not on our servers.
Your location data
BongoChat does not track, collect, or store your real-time or historical location data, unless you explicitly and voluntarily share your location within a chat (which is also end-to-end encrypted).
BongoChat employs industry-standard end-to-end encryption (E2EE) for all personal communications. This is not an optional feature — it is built into the core architecture of our platform and cannot be disabled.
When you send a message, it is encrypted on your device using your recipient's public key before it ever leaves your phone or computer.
The encrypted data travels through our servers as an unreadable cipher. BongoChat acts only as a relay — we never possess the decryption keys.
Only your recipient's device can decrypt and display the message using their private key, which never leaves their device.
This applies to all one-on-one and group chats, voice calls, video calls, and file transfers. The encryption keys are generated, stored, and managed entirely on your device using the Signal Protocol. BongoChat does not hold a copy of your encryption keys and cannot decrypt your communications even if compelled by any authority.
Important: While BongoChat secures all messages with E2EE, please be aware that no encryption system is impenetrable. If your device itself is compromised (e.g., by malware or physical access), the security of your messages may be affected. We strongly recommend keeping your device secure with a passcode, biometric lock, and up-to-date software.
The limited personal data we collect (excluding your encrypted communications) is used solely for the following purposes:
Service Delivery: To create and maintain your account, authenticate your identity, facilitate account recovery, and enable core platform features such as contact discovery and push notifications.
Security & Fraud Prevention: To detect, prevent, and respond to security threats, spam, abuse, and fraudulent activities. This includes analyzing usage patterns to identify suspicious behavior and protect the integrity of the platform.
Platform Improvement: To analyze aggregated, anonymized usage data to understand how users interact with BongoChat, identify performance issues, and guide feature development. No personally identifiable information is used for this purpose.
Legal Compliance: To comply with applicable laws, regulations, and lawful directives issued by competent authorities in Bangladesh, subject to the safeguards described in Section 5.
Communication: To send you service-related notifications, such as account verification, security alerts, feature updates, and responses to your support requests. You may opt out of non-essential communications at any time through your app settings.
We do not use your personal data for advertising, profiling, or any form of algorithmic manipulation. Your data is never sold to third parties under any circumstances.
Under the Personal Data Protection Act 2023 (PDPA) of Bangladesh, BongoChat processes your personal data based on the following legal grounds:
Consent: Where you have given explicit consent for specific processing activities, such as enabling optional features or receiving marketing communications. You may withdraw your consent at any time.
Contractual Necessity: Processing is necessary to provide the BongoChat service as described in our Terms of Service, including account creation, authentication, and service delivery.
Legitimate Interest: Where processing is necessary for our legitimate interests in maintaining platform security, preventing fraud, and improving our services, provided such interests do not override your fundamental rights and freedoms.
Legal Obligation: Where processing is required to comply with applicable laws, regulations, or enforceable government directives under the Digital Security Act 2018 or other Bangladeshi legislation.
BongoChat does not sell, rent, or trade your personal data to anyone. Your trust is the foundation of our service. We may share information only in the following limited circumstances:
Service Providers
We engage carefully vetted third-party service providers for infrastructure hosting, push notification delivery, and payment processing. These providers are contractually bound to process your data only as instructed by BongoChat and are prohibited from using your data for their own purposes. All service providers are required to maintain security standards equivalent to our own.
Legal & Regulatory Requirements
We may disclose personal data if required to do so by law, regulation, court order, or lawful directive from a competent Bangladeshi authority under the Digital Security Act 2018, the Telecommunication Regulation Act, or other applicable legislation. In such cases, we will:
Protection of Rights & Safety
We may disclose information to prevent fraud, protect the security of our platform, respond to imminent threats to the life or safety of any person, or investigate violations of our Terms of Service. Such disclosures are made judiciously and only when necessary.
E2EE Note: Even in the event of a lawful data request, BongoChat cannot provide the content of your encrypted communications because we do not possess the decryption keys and the data is not stored on our servers. Any disclosure would be limited to the metadata described in Section 1.
BongoChat retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, in accordance with the Personal Data Protection Act 2023 (PDPA):
Active Account Data: Retained for the duration your account is active and for a reasonable period thereafter to enable account recovery.
Log Data: IP addresses and connection logs are retained for a maximum of 90 days, after which they are automatically purged from our systems.
Crash Reports & Analytics: Anonymized diagnostic data is retained for up to 12 months for trend analysis and is then permanently deleted.
Deleted Account Data: Upon account deletion, all personal data is permanently erased within 30 days from our active systems and backups, except where retention is required by applicable law.
All data is stored on servers located within Bangladesh or in jurisdictions that provide an adequate level of data protection as recognized under applicable Bangladeshi law.
The Personal Data Protection Act 2023 (PDPA) of Bangladesh grants you the following fundamental rights regarding your personal data. BongoChat is committed to upholding each of these rights:
Right of Access
You have the right to request a copy of the personal data BongoChat holds about you. You can submit this request through the app (Settings → Privacy → Request My Data) or by emailing our Data Protection Officer.
Right to Rectification
You may request correction of any inaccurate or incomplete personal data at any time through your account settings or by contacting our support team.
Right to Erasure (Right to Be Forgotten)
You have the right to request the complete deletion of your personal data. Upon receiving a valid request, BongoChat will permanently erase your data within 30 days, subject to any legal retention obligations.
Right to Data Portability
You may request your personal data in a structured, commonly used, and machine-readable format (e.g., JSON or CSV) so that you can transfer it to another service provider.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw your consent at any time through your app settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
Right to Lodge a Complaint
If you believe that BongoChat has violated your data protection rights, you have the right to file a complaint with the Bangladesh Data Protection Authority or the relevant regulatory body established under the Personal Data Protection Act 2023 (PDPA).
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 working days as required by law. In certain circumstances, we may need to verify your identity before processing your request.
BongoChat implements robust technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:
Encryption in Transit & At Rest: All data in transit is protected using TLS 1.3. Data at rest is encrypted using AES-256 encryption. End-to-end encryption (Signal Protocol) protects all user communications.
Access Controls: Strict role-based access control (RBAC) limits internal access to personal data. Only authorized personnel with a legitimate business need can access user data, and all access is logged and audited.
Regular Security Audits: We conduct periodic third-party security audits, vulnerability assessments, and penetration testing to identify and remediate potential security weaknesses.
Incident Response: We maintain a comprehensive data breach response plan. In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant authority and affected users without undue delay, as required by the Personal Data Protection Act 2023 (PDPA).
BongoChat is not intended for use by children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have inadvertently collected personal data from a child under 13, we will take immediate steps to delete that information from our systems.
For users between the ages of 13 and 18, BongoChat requires parental or guardian consent for account creation. Parents or guardians who believe their child has provided personal data without consent may contact us at [email protected] to request its removal.
You have full control over your data and can delete your account at any time. Upon account deletion:
Go to Settings → Account → Delete Account in the app.
Confirm your identity and review the information that will be permanently deleted.
Confirm your deletion request. Your account will be deactivated immediately and permanently deleted within 30 days.
During the 30-day grace period, you can reactivate your account by logging back in. After 30 days, all your personal data — including profile information, contact lists, and account settings — will be permanently and irreversibly erased from our active systems and backups.
Alternatively, you can email a formal deletion request to [email protected]. We will process your request and confirm deletion within 30 working days as mandated by the Personal Data Protection Act 2023 (PDPA).
BongoChat reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable legal requirements. When we make material changes:
We will notify you via an in-app notification at least 30 days before the updated policy takes effect.
We will update the "Last updated" date at the top of this page.
Your continued use of BongoChat after the effective date constitutes acceptance of the updated policy. If you disagree with any changes, you may delete your account before the new policy takes effect.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection team:
We aim to respond to all data protection inquiries within 30 working days, as required by the Personal Data Protection Act 2023 (PDPA) of Bangladesh.
Exercise your right to erasure under the Personal Data Protection Act 2023 (PDPA). Submit a formal request to permanently delete all your personal data from BongoChat servers.
বঙ্গোচ্যাট বিনামূল্যে পান
গুগল প্লে-তে উপলব্ধ