Data Protection & Security

In transit and at rest

All traffic uses TLS. Passwords are hashed with Argon2id. Refresh tokens and one-time passwords are stored only as hashes.

Access control

Administrator access is role-based. Identity documents and reported conversations require specific permissions, and every access is written to an audit log.

Payments

Card and bank credentials are handled entirely by our payment provider. Snehse servers never see or store them.

What we do not claim

We do not claim end-to-end encryption of chat: messages are stored server-side so that history, moderation and safety reporting can work. We cannot prevent screenshots on every device, and we do not claim to.

Reporting a vulnerability

Please contact the support address in the app. We will acknowledge responsible disclosures.