Privacy
This is what Connect keeps, where, and why. There is nothing else.
Your account
You sign in with Google. Google tells Connect your account id, name, email and profile photo; Connect stores your account id, the username you choose, and the photo you pick (your Google photo, one you upload, or a cat). Your email is held by the sign-in service and shown only to you. Anyone signed in can find you by username and see your username, photo, and whether you are online or when you were last seen.
Your messages are end-to-end encrypted
Everything you say is locked on your device before it leaves it: the words, photos, files, voice notes, the GIF you picked, reply quotes, reactions and the one-line preview on the home screen. It is stored in Google's Firestore database and carried by Google's push service as ciphertext only. The keys live on your devices and the other person's β in the browser's own key store, never on a server β so nobody in between, including the person who runs Connect, can read a chat. Messages are not scanned, analysed or used for anything but showing them to the two of you.
How it works: each device you sign in on makes its own key pair and publishes the public half. Each chat has a key that is handed to every device of both people, wrapped so only that device can open it, and replaced with a fresh one every week. A new device is given the chat's keys by one you already use, or by the other person, the next time either opens Connect. Because the public keys are looked up through Connect's database, the guarantee rests on those keys being genuine β the security code in a chat's menu is a fingerprint of both people's device keys; compare it in person or on a call to be sure, and you are told when the other person adds a device. Messages sent before this update were stored unencrypted; each is encrypted by its sender the next time they open that chat.
What is not hidden, because the app cannot work without it: who talks to whom and when, whether a message is text, a photo, a file or a voice note (not what is in it), its size, whether it was edited or deleted, read receipts, typing, disappearing-message timers, and call logs (that a call happened and for how long). GIFs are pictures on KLIPY's or GIPHY's servers; what you type into the GIF search goes to KLIPY through Connect's server without your name, and the GIF itself is fetched from their servers by both phones. Clearing the browser's site data removes that device's keys, and the chat's history comes back to it once another device that holds them opens Connect.
Deleting
Deleting a message removes it for both people and leaves a "message deleted" marker. Disappearing messages are deleted when their timer ends. Clear chat and Delete chat hide a chat on your side only β the other person keeps their copy, just as you keep yours when they clear it. Deleting your account (Profile β Delete my account) removes your username, photo and notification devices and signs you out; messages you sent stay in the chats of the people you sent them to.
Calls
Video and voice calls go directly between your two devices when the network allows, and otherwise through a relay (Cloudflare) that passes the encrypted stream along without storing it. Setting up the call goes through the PeerJS signalling service. Nothing about a call is recorded; the chat keeps only that a call happened and how long it lasted.
Notifications
If you turn notifications on, a device token is stored under your account so Connect can reach that device. A notification carries the sender's username and the encrypted preview; your phone decrypts it with the chat's key to show the words, and shows "New message" if it can't. Google's (and on iPhone, Apple's) push service only ever sees the ciphertext. Muting a chat stops its message notifications.
What Connect does not do
No analytics, no ads, no trackers, no selling or sharing of anything with anyone. The services involved are Google (sign-in, encrypted storage, push), Vercel (the app and its three small server functions), Cloudflare (call relay), and KLIPY (GIF search) β none of them can read a chat, and each sees only what it needs to do its job.
Questions
Connect is run by a person, not a company. For a question or a deletion request, ask the person who gave you the link.