Nothing to leak
We hold no database of emails and phone numbers, because we never collect them. What does not exist cannot leak.
All it takes to start talking is a name and a key. We do not ask for an email, we do not ask for a phone number, and there is no SMS to confirm.
When you register you get a key — a string that is your way in. Saving it is enough: there is no password to invent and later recall, and no address for a sign-in link to arrive at.
If you dropped in for one conversation and do not plan to return, a temporary account fits: it lasts a day and disappears on its own. Change your mind and it becomes permanent, losing nothing.
We store your name, avatar, chosen language, and a list of your devices in the form of “Chrome 131”, so that you can spot a sign-in that is not yours and close it. We do not store IP addresses. Nor the full browser string: on its own it identifies a person rather well, and it is useless for the question of whether a device is yours.
Calls are not recorded: the server passes audio and video between participants and keeps neither.
In most services an email address is there for the service, not for you: to restore access, to send you mail, and to tie your activity to one address. The first is solved by a key; the other two are not our business.
This approach has a price and we do not hide it: a lost key cannot be recovered. In exchange you leave nothing behind beyond a name — no address, no number, and no sign-in history tied to an IP.
We hold no database of emails and phone numbers, because we never collect them. What does not exist cannot leak.
Settings list the devices you signed in from and when each was last active. Anything you do not recognise closes with one button, everywhere at once.
Someone you invite for a single call never has to decide whether they trust you with their email. They simply join.
You cannot — that is the flip side of having no email. There is nothing to recover with, and nowhere to send a link. Keep the key wherever you keep your passwords.
No. We store neither the IP nor the full browser string — only a short device description such as “Chrome 131”, so you can recognise your own sign-ins.
No. hi:voca has no call recording; the server only passes the stream between participants.
Yes, on a temporary account: one tap, no email, no phone. It lasts a day, and if you decide to stay it becomes permanent.
Settings list your devices and when each was last active. A single sign-in can be closed on its own, or all of them at once — old access keys stop working afterwards.