Rockex Privacy Policy
Last updated: 1 October 2026
1. Who we are
Rockex is an end-to-end encrypted messaging and calling app operated by ROKiT Group ("ROKiT", "we", "us"). This policy explains what the Rockex app collects, why, and who it is shared with.
This policy is complete on its own: it covers your Rockex account, from signing in with your phone number to deleting your account.
2. What we collect
Rockex is built so that we hold as little as possible. Your messages and calls are end-to-end encrypted: only you and the people you talk to can read or hear them.
Your account. Your phone number, which is how you sign in and how people find you. The name and profile photo you choose, and an email address if you add one. These are stored on our servers so other Rockex users can see who they are talking to. If you block someone, the list of people you have blocked, with the name and photo they had when you blocked them, is stored with your account so it applies on all your devices.
Your contacts. Only if you allow access. Your contact list stays on your device, where Rockex uses it to show your contacts' names and let you start a chat. When you pick a contact, their phone number is sent to our server, which answers only whether that number is on Rockex. The number is not stored and not logged. Your contact list is never uploaded.
Messages, media and calls. Text, photos, videos, files and voice messages are encrypted on your device before they are sent. Our servers store and deliver them in that encrypted form and cannot read them. Voice and video calls are encrypted between the devices on the call; when a direct connection is not possible, the encrypted call is relayed through our server.
To deliver messages, our servers need to know which accounts are in which chats and when messages are sent. They do not know what the messages say.
Reports. If you report a message, Rockex tells us which message it was, who sent it and when, and sends anything you write in the report, so we can review it and act on it. The message itself is not sent.
Your PIN and keys. If you set an app PIN, Rockex creates an account key. Its private half is stored on our servers encrypted with your PIN, so we cannot use it; its public half is shown on your profile so others can send you PIN-protected messages. The keys that let you read your chat history on a new device are stored with it, sealed to that account key. PINs or passwords you put on individual messages never leave your device.
ROKiT Ai. Every account starts with a chat with ROKiT Ai, an assistant that runs on our own systems. This chat is not end-to-end encrypted, because the assistant has to read your message to answer it. Your messages are processed only to reply. The assistant does not keep them and they are never used to train or improve it. Like every chat, the conversation's history is held on our server so it appears on your devices. You never have to use this chat.
Device and technical information. A push notification token, your device model and operating system version and the app version. Our servers necessarily see your IP address when your device connects, as with any internet service, but our server logs do not record your IP address or anything else that identifies you.
Usage and diagnostics. App usage events, crash reports and performance measurements. These never contain your messages, contacts, name, phone number or account ID.
Permissions. Rockex asks for the camera to take photos and videos and for video calls; the microphone for voice messages and calls; your photo library to send photos and videos; and notifications to tell you about messages and calls. Each is optional and used only for that purpose.
3. How we use it
We use your information only to run Rockex:
- to create your account and verify your phone number;
- to show other users your name and photo, and to tell you which of your contacts are on Rockex;
- to deliver your encrypted messages, media and calls, and to notify you about them;
- to let you restore your chat history on a new device with your PIN;
- to answer you in the ROKiT Ai chat;
- to keep the service secure, prevent abuse and review the reports you send us;
- to find and fix faults and to understand, in aggregate, how the app is used;
- to meet our legal obligations.
Rockex shows no ads and we do not sell your information. We advertise Rockex itself, and our analytics are linked to Google Ads only so we can measure how well those campaigns work, for example how many installs an ad led to. Rockex does not collect your device's advertising identifier, and the events are not used for personalised advertising or remarketing. They never contain your name, phone number, account, contacts or messages.
4. Our legal basis
Where data protection law such as the UK GDPR or EU GDPR applies, we rely on these legal bases:
| What we do | Legal basis |
|---|---|
| Creating your account, verifying your phone number, showing your profile, delivering messages, media, calls and notifications, storing your key backup, answering you in the ROKiT Ai chat, deleting your account | Performance of our contract with you (our Terms of Use) |
| Checking whether a contact you pick is on Rockex | Your consent, given when you allow contacts access; you can withdraw it at any time in your device settings |
| Camera, microphone, photo library and notifications | Your consent, given through your device's permission prompts; you can withdraw it at any time in your device settings |
| Usage analytics, crash reports, performance data and measuring our own advertising | Our legitimate interest in keeping Rockex reliable and understanding how people find it, balanced against your privacy by excluding your name, number, account, contacts and messages |
| Reviewing reports, preventing abuse and keeping the service secure | Our legitimate interest, and yours and other users', in a safe service |
| Keeping records the law requires and responding to lawful requests | Compliance with a legal obligation |
Where we rely on legitimate interests, you have the right to object; contact us at the address below.
5. Who we share it with
We do not sell your personal information. We do not share your contacts, and we cannot share your messages or calls: they are end-to-end encrypted and we cannot read them.
Rockex uses these service providers, each only for the purpose shown:
| Provider | What it receives | Why |
|---|---|---|
| Google Firebase Authentication | Your phone number | To send and check the code that verifies your number when you sign in |
| Google Firebase Analytics | App usage events, such as which screen was opened or whether sign-in succeeded. Never your messages, contacts, name or phone number | To understand how the app is used and improve it, and, through its link to Google Ads, to measure how well our own advertising of Rockex works |
| Google Firebase Crashlytics and Performance Monitoring | Crash reports and performance measurements, with device model and OS version | To find and fix faults |
| Apple Push Notification service (iPhone, iPad) and Firebase Cloud Messaging (Android) | A device token and the information needed to deliver a notification. Message content stays encrypted and is decrypted on your device | To tell you about new messages and incoming calls |
| Google STUN server | Your device's IP address, during a call | To find a network route between you and the person you are calling |
| Our hosting providers | Data we store, as described in this policy | To run Rockex's servers |
We may also disclose information when the law requires it, to protect the safety of users or others, or as part of a merger or sale of the business. Because messages and calls are end-to-end encrypted, we cannot disclose their content.
6. Deleting your account
You can delete your account at any time in Settings › Delete account. It happens straight away and cannot be undone.
We delete your account and the personal information we hold about you, including your phone number, name, photo and keys, and remove your details from the chats you were in. Messages and media you sent stay readable to the people who were in the chat at the time, but not to anyone who joins later, and copies on other people's devices are not affected.
Our backups are deleted within 7 days. We may keep limited records where the law requires it.
7. How long we keep information
We keep your account information while your account exists and delete it when you delete your account, as described in section 6. Phone numbers checked against Rockex from your contacts are not kept at all. Messages to ROKiT Ai are not kept by the assistant. Analytics and crash data are kept by Google for the retention period set in our Firebase settings, and are not linked to your name, phone number or account.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict how we use it, and to withdraw consent. You can change your name and photo in the app and delete your account in Settings. For anything else, email us at the address below. You also have the right to complain to your local data protection authority.
9. Security
Messages, media and calls are end-to-end encrypted. Data stored on our servers is protected with access controls and encryption in transit. No system is perfectly secure, so keep your phone and your PIN safe.
10. International transfers
Rockex's servers and service providers may be in countries other than yours. Where the law requires it, we use appropriate safeguards for these transfers.
11. Children
Rockex is not for children under 13, or under the minimum age for digital consent in your country if that is higher. We do not knowingly collect information from them.
12. Changes to this policy
If we make significant changes, we will tell you in the app before they take effect. The date at the top shows when this policy was last updated.
13. Contact us
ROKiT Group
ROKiT House, Kingswood Business Park, Holyhead Road, Albrighton, WV7 3AU, United Kingdom
Email: support@rokit.com