Privacy policy
Last updated: 27 October 2026
RedMessages is operated by Bluechip Asset Management ("we", "us"). This policy explains what we collect, why, and the choices you have.
What we collect
From RedMessages users
- Account details: your name and mobile phone number, used to sign in with a one-time code.
- Emergency contacts: the names, phone numbers and email addresses of people you add.
- Message settings: the messages you set up, including your private code phrases. Phrases are stored encrypted, are never written to logs, and are not visible to our staff.
- Location: your location at the moment you send a safety message, so it can be sent to your contacts. We do not track your location at other times.
- Message history: when messages were sent, to whom, and whether delivery succeeded.
From emergency contacts
- Your name, phone number and/or email address as entered by the user who added you, and your YES or STOP reply.
Audio and speech
If you use a spoken trigger phrase, speech recognition runs entirely on your iPhone. Audio and transcripts are never sent to us or stored by us.
How we use information
- To send your messages to the contacts you chose, by text message, email, or in the app.
- To send each new contact a single confirmation text, and to honor STOP and HELP replies.
- To operate, secure and support the service.
We do not sell personal information, and we do not use it for advertising.
Text messaging
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except the service providers listed below that deliver the messages.
Service providers
We use the following providers only to run RedMessages, under agreements that limit their use of your data:
- Supabase: database, sign-in and server hosting.
- Twilio: text message delivery.
- Resend: email delivery.
- Apple: app distribution and on-device speech recognition.
We may disclose information if required by law, or to protect someone's safety.
Retention and deletion
We keep your information while your account is open. You can delete your account in the app or by emailing us, and we will delete your data within 30 days, except where the law requires us to keep it. Contacts can reply STOP at any time, and can email us to have their details removed.
Security
Data is encrypted in transit and at rest, and access is restricted so each user can only reach their own data.
Children
RedMessages is not intended for children under 13, and we do not knowingly collect their information.
Changes
If we change this policy, we will update the date above and, for significant changes, notify users in the app.