Privacy Policy

Last updated: June 13, 2026

Hexis is in private beta. This page describes how the product actually handles your data today. We'll expand it as Hexis matures.

Who we are

Hexis is operated by jay0 dev LLC ("we", "us", "our"), covering the Hexis application and the website at hexis.chat.

What the server can't see

Hexis is built as a blind relay. Your messages and voice are end-to-end encrypted on your device and the server only ever handles ciphertext — we cannot read, and do not store, the plaintext of what you send.

What we do collect

• Account data: your username, an optional email address, and a hashed password.
• Waitlist data: your email address, if you join the waitlist.
• Delivery metadata: the data needed to route messages — which servers and channels you belong to, and connection metadata.
• Payments: handled by Stripe if you buy a subscription. We never see or store your card number.

Who we share it with

We don't sell your data. The only third parties involved are Stripe (payments) and Cloudflare (which fronts our network). Each is bound by its own privacy terms.

Security

Passwords are hashed with Argon2id. Sessions use short-lived JWT access tokens with rotating refresh tokens. Message payloads are end-to-end encrypted with the MLS protocol and stored only as ciphertext the server can't read. Infrastructure runs on a hardened, single-tenant host with no public inbound ports — all traffic is proxied through Cloudflare Tunnel.

Deleting your data

You can delete your account from the app, or email us to remove your account data or take your address off the waitlist.

Contact

jay0 dev LLC
Email: [email protected]