#How CHRP is different
CHRP has no accounts, no feeds, no discovery, and no strangers. Nobody can message you unless you physically met them and both of you consented to pair. Your conversations are end-to-end encrypted; CHRP's infrastructure cannot read them — not as a promise, as an architecture.
#Zero tolerance
Using CHRP for harassment, threats of violence, exploitation of minors, trafficking, or any illegal activity is prohibited. There are no warnings for child-safety violations: verified cases result in permanent denial of CHRP infrastructure service to the reported identity — Block & Burn additionally keeps their physical device blocked on your phone — and reports to the National Center for Missing & Exploited Children (NCMEC) as required by 18 U.S.C. § 2258A.
#Your protections (all on your device, no permission needed from us)
- Block — instantly and permanently stops all contact.
- Block & Burn — blocks the person and their physical phone: a new identity on the same hardware stays blocked.
- Consent gates — screenshots ask first; keeping a conversation past 24 hours requires both sides to agree.
#Reporting
Report any contact from the conversation menu ("Report a Safety Concern").
- Routine reports (spam, harassment, impersonation) send who and why — never your messages. Your case ID appears the moment the report reaches CHRP; if you're offline, the app keeps it and sends automatically.
- Serious reports (child safety, threats of violence, trafficking) include the full conversation with the parts you highlight. It is encrypted on your phone so that only CHRP's safety reviewer can open it — not our servers, and not even you after sending. Every serious report is reviewed by a person; child-safety reports are reviewed first.
- A report is never silently lost. If CHRP can't be reached, the app keeps your sealed report on your phone and lets you email it to [email protected] — still encrypted, still unreadable to anyone but the safety reviewer.
- The person you report is never notified.
- Reports are one-way: no one — including the reporter — can read a report back after it is sent. Unfounded report content is deleted after review; filing deliberately false serious reports violates these terms.
#The exceptions, stated plainly
CHRP alerts you when your words are captured — screenshots ask permission, saving asks consent. Two exceptions exist, both for safety, and every user is told about both before their first conversation:
1. Silent reporting. If a conversation is reported for safety, it is sent to CHRP silently. Report alerts would endanger the people reports exist to protect. 2. The 24-hour deletion hold. When a whole conversation is deleted, each phone keeps a copy for 24 hours before destroying it forever — encrypted at the moment of deletion with a key that is on neither phone and on no server. Unsending an individual message is not held; neither is routine retention-policy expiry — only whole-conversation deletion. No one can read, export, or recover the held copy: not you, not the other person, not CHRP's infrastructure. Its only possible use is a serious-category safety report (child safety, threats of violence, trafficking) filed within the window, which may attach the still-sealed copy for CHRP's safety reviewer; content reaches law enforcement only for verified serious cases. If no report is filed, the copy self-destructs at 24 hours and nothing leaves either device. This exists so that deleting a conversation cannot destroy the evidence of abuse inside it.
#Data handling
Reports are retained at most 30 days (routine) / 180 days (serious), except where law requires preservation of verified serious-case evidence. Reports are used only for safety review — never for advertising, profiling, or any other purpose. CHRP has no accounts, so a report contains only pseudonymous device identities and what the reporter chose to include.
#Contact
Safety: [email protected] · Support: [email protected] Safety reports are answered before anything else we do; child safety comes first.