Messenger Spirit Privacy Policy
Last updated: October 14, 2026
Lynx Cyber Division ("we," "us") provides Messenger Spirit ("Spirit"), an Android messaging application and related services. This policy explains what information Spirit handles, how it is used, and when it is shared.
Information we handle
- Account and profile information: username, email address, password hash, profile name, status, profile image, account identifier, and account creation date. The server stores a one-way hash of the account email for matching. When email verification or password recovery is enabled and requested, the email address is used to send a one-time code; pending registration email data is encrypted while the request is active.
- Device and session information: device identifier, device name and type, session credentials, and Firebase Cloud Messaging (FCM) token. These support sign-in, multiple devices, message delivery, and push notifications. The server also receives network connection information such as IP address; server connection logs may contain remote addresses.
- Messages and shared content: message content, attachments, posts and comments, group/channel membership, reactions, read and delivery state, and related timestamps and identifiers. Conversation history is stored on your device and some service data is stored on Spirit servers to provide delivery and related functions. Supported private conversations use end-to-end encryption; the server stores their encrypted content and cannot read it. AI chats and public-channel content are not end-to-end encrypted and may be accessible to the service.
- AI conversations: if you use AI chat, prompts and relevant conversation history are stored by the AI service and sent to the AI provider configured for the service, currently DeepSeek or OpenAI, to produce replies. AI conversation history is routinely pruned after 7 days for free accounts and 90 days for premium accounts. Clearing an AI conversation in Spirit requests removal of its server-side context.
- AI web search: when web search is used, search queries may be sent to DuckDuckGo and public pages may be fetched to answer the request. Those sites receive the query or page request as part of serving it.
- Optional backups: some builds can enable Spirit Disk chat backups. If enabled and you choose to create a backup, the app uploads backup metadata and encrypted backup data to the configured Disk service. Backups are encrypted on the device; for password-protected backups, the password stays on the device. Disk is disabled in the standard app build unless separately configured.
- Permissions and local processing: camera and microphone are used for features you start, such as calls or recording media. Call audio/video is transmitted through encrypted call transport to the participants. The on-device spam detector analyzes messages locally. Spirit's contact list contains Spirit usernames and local display names; the app does not request access to your Android address book.
How we use information
We use information to create and secure accounts, authenticate devices, provide messaging and calling, operate groups and channels, deliver notifications, provide optional AI and backup features, prevent abuse, troubleshoot failures, and respond to privacy requests. Spirit does not include an advertising SDK or an analytics SDK. Firebase Cloud Messaging is included to deliver push notifications.
When information is shared
- Other Spirit users receive the information and content you send or publish to them. Content in end-to-end encrypted private conversations is encrypted on your device; AI chats and public-channel content are not end-to-end encrypted.
- Google Firebase receives the FCM token and push data needed to notify you, including the sender's username and a generic new-message or media notification.
- The configured AI provider receives your AI prompt and relevant conversation context when you use AI chat. DuckDuckGo and requested websites receive search queries or page requests when AI web search is used.
- The configured email delivery provider receives your email address and one-time code when you request email verification or password recovery.
- If you use a build with Disk enabled, the configured Disk service receives encrypted backups and related metadata.
- Hosting, infrastructure, and network providers may process information as needed to operate the service. Information may also be disclosed when required by applicable law or to protect users, the service, or our rights.
Storage, retention, and deletion
Conversation data is stored locally on your device. Android backup or restore may also handle app data according to your device settings. Signing out or uninstalling Spirit does not delete your server account or server-side records. You can clear AI conversation context in the app; AI history is also pruned after 7 days for free accounts and 90 days for premium accounts. Unverified registration records expire and are cleaned up. Other account, profile, message, and attachment data is retained as needed to operate the service; there is no fixed published retention period for all such records.
Spirit currently has no self-service account deletion feature. For privacy questions or to ask about deletion of account information, contact admin@lcdivision.com and include your Spirit username. Do not send your password. Deleting local app data does not delete server-side data. Delete any optional Disk backups separately using the Disk feature.
Security
Spirit uses encrypted network connections for its main client-server connection and end-to-end encryption for supported private conversations. Passwords are stored by the server as password hashes. We use technical and organizational safeguards intended to protect data, but no internet transmission or storage system can be guaranteed completely secure.
Changes and contact
We may update this policy as Spirit or its data practices change. The current policy will remain available at this URL. Privacy contact: admin@lcdivision.com.
Developer: Lynx Cyber Division
App: Messenger Spirit