NewCubeLine Desktop 1.3.3 for Linux. Download progress, group links and 100 MB filesGet it →
Privacy policy

Your privacy, in plain words.

What CubeLine collects, what it never collects, and what you can do about it. It applies to CubeLine on Android, iPhone, desktop and CubeOS phones.

Updated 18 October 2026Egoras Technologies PLCCubeLine for Android, iPhone and desktop
No ads, no tracking

No advertising SDKs and nothing sold. Ever.

No phone or email

Sign up with a username and get a Cubeline.

End to end encrypted

Messages, calls, files and backups. We can't read them.

Your keys, your phone

Private key and wallet keys never leave your device.

01Who we are

This policy covers CubeLine, the messaging, calling and wallet app made by Egoras Technologies PLC ("Egoras", "we", "us"). It applies to CubeLine on Android, CubeLine on iPhone (listed on the App Store as Egoras), CubeLine Desktop, and the CubeLine apps built into CubeOS phones.

Egoras is the controller of the small amount of personal data described here. You can reach us at support@egoras.com about anything in this policy.

CubeLine is built so that we cannot read your messages, listen to your calls, open your backups or move your crypto. Most of what you do in CubeLine never reaches us in a form we can use.

02What we collect

CubeLine has no ads, no advertising or tracking SDKs, and no analytics that build a profile of you. This is everything that reaches our servers or our service providers, and why.

Your account

DataWhat it is for
Cubeline numberYour 11-digit line, which people use to message, call and pay you. It is public by design: anyone can look a Cubeline up.
UsernameThe name you choose at sign-up, so you can sign in and be found.
Display name and profile photoOptional. Your display name is stored with your account. Your profile photo is shared end to end encrypted with the people you talk to, not stored readable on our servers.
Account ID and wallet addressYour public messaging ID (a public key) and your public wallet address. These are linked to your Cubeline in a public record on Cube Chain so others can reach and pay you.
Password checkYour password never leaves your phone. The phone turns it into a key, and we store only a one-way fingerprint of that key so we can check a sign-in. We lock an account for an hour after 10 wrong passwords.
Sign-in tokensA random token per signed-in device, so you stay signed in. Removed when you log out.

We do not ask for your email address, phone number, real name, date of birth or ID. Your private key (the 13 words shown at sign-up) is created on your phone and never sent to us. We cannot recover it.

Messages, calls and files

  • Messages, voice notes, photos, videos, files and status updates are end to end encrypted on your device using the Session protocol. They travel through CubeNet, an onion-routed network, so no single server learns both who sent a message and who it is for.
  • Encrypted messages wait on CubeNet nodes until your contact's device collects them, for up to 14 days, then they expire. Encrypted attachments are held on our file server for the same purpose. Nobody, including Egoras, can open them.
  • Voice and video calls are end to end encrypted. To connect a call, our call relay servers see the IP addresses of the two devices and when the call happens, but never what is said. The relay also means the person you call never sees your IP address.
  • Public channels you join or create, and their posts, are visible to everyone in the channel, and the channel is hosted on our server.

Notifications

To wake your phone when a message or call arrives, your device gives our push server a push token and your account ID. Notifications are delivered through Google Firebase Cloud Messaging (Android) or Apple Push Notification service (iPhone). The notification carries no readable message content; your phone fetches and decrypts the message itself.

Cubeline Backup (Android)

Cubeline Backup lets a new phone get everything back with your private key. It backs up your chats, your phone's address book, your call history (only in the version downloaded from cubeapp.org, not the Google Play version), and your photos, videos and music. It is on when you start and runs once a day on Wi-Fi while charging; you can turn it off, or delete your backups, in Settings › Cubeline Backup.

Everything is encrypted on your phone with keys made from your private key before it is uploaded. We store only the encrypted data, its size and when it was made, on our own servers. We cannot read it, and we never use it to find or contact anyone.

Wallet and payments

  • Your wallet is self-custodial. Its keys are created and kept on your device. We never hold your crypto and cannot move it or reverse a payment.
  • Blockchains are public. Wallet addresses, balances and transactions on Cube Chain, Ethereum, BNB Chain, Base and the other supported networks are visible to anyone and cannot be erased by anyone, including us.
  • To show balances and send payments, the app asks public blockchain nodes (RPC providers) about your wallet address. Prices come from CoinGecko and LI.FI. Swaps and bridges are quoted and routed by LI.FI, which receives your wallet address, the tokens and the amount. These providers see your IP address when the app contacts them.
  • CubeLine fee: sends, swaps and bridges on networks other than Cube Chain include a 0.875% fee paid on chain to Egoras's wallet. It is shown before you confirm.

Naira wallet (Nigeria)

  • Adding money is handled by our payment processor Korapay. We give Korapay your account number and a placeholder email made from it (no real email), and keep the payment reference, amount, fee and status. Your card or bank details go to Korapay, not to us.
  • Withdrawing to a bank is paid out by 100Pay. We keep the bank, account number, account name, amount and status of each withdrawal, and share them with 100Pay to make the payment.

Explore (dating, Android, 18+)

Explore is off until you turn it on in Settings › Privacy, and is only for people 18 and over. If you use it, we store the profile you create (name, date of birth, gender, what you're looking for, bio and up to 6 photos) and an approximate location, rounded to about 1 km, so we can show you people nearby. Other Explore users see your profile and rough distance, never your exact location. You can block, report and unmatch people, and delete your Explore profile at any time; it is also deleted with your account.

Other services the app contacts

  • ipapi.co receives your IP address to tell the app which country you're in, so it can show prices in your currency.
  • ExchangeRate-API (open.er-api.com) provides currency exchange rates. No personal data is sent.
  • The version downloaded from cubeapp.org checks realiax.org for updates. The Google Play and App Store versions update through the store.

Crash reports and analytics

CubeLine does not collect analytics or crash reports. The Android app includes Google's Firebase Crashlytics library with collection switched off. If we ever switch crash reporting on, we will update this policy first, and reports would contain no messages, contacts, keys or wallet data.

What's on which platform

The Naira wallet, Cubeline Backup and Explore are only in CubeLine for Android and CubeOS phones. CubeLine on iPhone and desktop collects only what is described above for accounts, messages, calls, notifications and the crypto wallet.

Permissions on your phone

PermissionUsed for
CameraVideo calls, photos and videos you send, and scanning QR codes. Only when you use these features.
MicrophoneVoice and video calls and voice notes.
Photos, videos and filesChoosing what you send, and saving what you receive.
ContactsAndroid: adding the people you chat with to your phone's Contacts app, and including your address book in Cubeline Backup (encrypted; we can't read it). iPhone: only when you tap Add to Contacts. We never use your contacts to find or message people.
Location (Android)Only for Explore, if you turn it on: an approximate location rounded to about 1 km. CubeLine does not use your location for anything else.
NotificationsTelling you about messages and calls.
Face ID, fingerprint or screen lockConfirming payments and unlocking locked chats. Checked by your phone; we never receive biometric data.
Phone and calls (Android)Showing CubeLine calls like normal calls and on the lock screen. The cubeapp.org version can also back up your call history in Cubeline Backup; the Google Play version does not read it.

You can turn any permission off in your phone's settings. The features that need it will stop working, and everything else keeps working.

Features that stay on your phone

Chat lock PINs, screenshot blocking, privacy blur, the secure chat watermark and its hidden leak code, and the canary trap records are all created and kept on your device. They are not sent to us.

03How we use it

We use the data above only to:

  • create your account, keep you signed in and keep it secure (for example, locking an account after repeated wrong passwords);
  • deliver your messages, calls and notifications;
  • store your encrypted backups and restore them when you ask;
  • process Naira deposits and withdrawals and keep the financial records the law requires;
  • fix crashes and keep the service running;
  • respond to you when you contact us, and act on reports of abuse;
  • meet our legal obligations.

Our legal bases are performing our contract with you (providing CubeLine), our legitimate interest in keeping the service secure and working, your consent where we ask for it (for example, phone permissions), and legal obligations.

We do not sell your personal data, use it for advertising, or track you across other companies' apps and websites.

04Who we share it with

We share data only with the service providers that help run CubeLine, and only what each one needs:

ProviderWhat they receive
Google (Firebase)Push tokens and encrypted wake-up notifications (Android).
ApplePush tokens and encrypted wake-up notifications (iPhone).
KorapayNaira deposits: your account number, a placeholder email and the amount.
100PayNaira withdrawals: bank, account number, account name and amount.
LI.FIWallet address, tokens and amounts for swap and bridge quotes.
CoinGeckoRequests for token prices and charts.
ipapi.coYour IP address, to work out your country for currency display.
Blockchain RPC providersYour public wallet address, when reading balances and sending transactions.
Hosting providersRun our servers, which hold the data described above.

We may also disclose data if the law requires it, to protect people from harm, or as part of a merger or sale of our business, in which case this policy continues to apply. Because of end to end encryption, we have no message content, call content or backup content to give anyone.

05How long we keep it

  • Account data: until you delete your account.
  • Encrypted messages on CubeNet: until delivered, and at most 14 days.
  • Push tokens: until you log out, uninstall the app, or the token stops working.
  • Encrypted backups: until you delete them or your account.
  • Explore profile and photos: until you delete them or your account.
  • Naira deposit and withdrawal records: as long as Nigerian financial and anti-money-laundering law requires (generally 5 years), even after you delete your account.
  • Blockchain records: permanent, because no one can delete a blockchain. Deleting your account clears your Cubeline's wallet and messaging records going forward, but past transactions stay on chain.

06Deleting your account

You can delete your account at any time, in the app: Settings › Security › Delete account. If you can't open the app, follow the steps on our account deletion page.

Deleting removes your account, username, display name, password check, sign-in tokens, push tokens, backups and Explore profile from our servers, and clears your Cubeline's records on Cube Chain. Messages already delivered stay on the devices of the people you sent them to. Your crypto stays in your wallet: export your private key first if you want to keep using it.

07Your rights

Depending on where you live, including under Nigeria's Data Protection Act 2023, the EU and UK GDPR, and California law, you can ask us to:

  • tell you what personal data we hold about you and give you a copy;
  • correct it;
  • delete it;
  • restrict or object to how we use it;
  • move it to another service;
  • withdraw consent you gave us.

Write to support@egoras.com. We answer within 30 days. Much of your data you can see, change or delete yourself in the app. You can also complain to your data protection authority; in Nigeria that is the Nigeria Data Protection Commission.

08Children

CubeLine is not for children under 13, and we do not knowingly collect data from them. Where local law sets a higher age for using an online service without a parent's consent, that age applies. If you believe a child under 13 has an account, write to support@egoras.com and we will delete it.

We have zero tolerance for child sexual abuse and exploitation. See our child safety standards.

09Security

End to end encryption, onion routing, keys that never leave your device, passwords that are never sent to us, and encrypted backups protect your data even if a server is compromised. Our servers use encrypted connections (HTTPS/TLS) and restricted access. No system is perfectly secure, so keep your private key and password safe, and lock your phone.

10International transfers

Our servers and service providers may be outside your country, including in Nigeria, the European Union and the United States. When data moves between countries we rely on the safeguards the law requires, such as standard contractual clauses.

11Changes to this policy

When we change this policy we update the date at the top of this page, and for important changes we tell you in the app before they apply. The current version is always at egoras.com/privacy.

12Contact us

Egoras Technologies PLC
Email: support@egoras.com

For account deletion, see egoras.com/delete-account. To report abuse or a child safety concern, use Report in the app or write to support@egoras.com.

Related pages

Delete your accountIn the app or by emailChild safety standardsZero tolerance for abusePrivacy policyWhat we collect and why