Privacy & Security Document

A complete, transparent overview of how Qtalk accesses your device, what technologies power it, and how your data is protected at every step.

๐Ÿ”’ End-to-End Encrypted ๐Ÿข QualTechEdge Infrastructure ๐Ÿ“ฑ Android Mobile App ๐Ÿ“… May 2026
๐Ÿ›ก๏ธ

Our Core Commitment

Qtalk was built entirely by QualTechEdge and runs exclusively on our own private servers. No employee data is ever shared with, sold to, or accessible by any external company or third-party platform.

What Qtalk Accesses on Your Device

Qtalk requests only the minimum permissions required for specific features. Here is a complete and honest list of every permission, why it exists, and when it is used.

Permission & Reason
When Is It Used
Status
๐Ÿ””
Push Notifications
To alert you when you receive a new message or meeting invite
Only when a message or meeting invite arrives
Required
๐Ÿ–ผ๏ธ
Photos / Gallery
To allow you to share an image in a chat conversation
Only when you tap "Attach Image" and actively choose a photo
On Demand
๐Ÿ“
Storage / Files
To allow you to share documents (PDF, ZIP, etc.) in chat
Only when you tap "Attach File" and select a document
On Demand
๐Ÿ’พ
Save to Gallery
To save a photo someone shared in chat to your phone gallery
Only when you long-press a photo and tap "Download"
On Demand
๐ŸŒ
Internet Access
To connect to Qtalk servers for sending and receiving messages
Always required โ€” this is how the app communicates
Required
๐ŸŽ™๏ธ
Microphone
Reserved for future voice features (not active in current version)
Not used in the current version of the app
Not Active

What Qtalk Can Never Access

These items are completely inaccessible to Qtalk โ€” technically impossible for the app to read, browse, or transmit under any circumstance.

๐Ÿฆ
Banking apps or financial data
๐Ÿ’ฌ
WhatsApp, SMS, or personal messages
๐Ÿ“ท
Personal photos you haven't shared
๐Ÿ“ž
Call logs or phone contacts
๐Ÿ“
GPS location or live location
๐Ÿ”‘
Passwords or device credentials
๐Ÿ“ง
Personal emails or Gmail
๐Ÿ“ฑ
Other apps installed on your phone
๐Ÿง 
Device identifiers or advertising IDs
๐Ÿ”
Browser history or search activity

How Your Messages Are Protected

Every message sent through Qtalk is encrypted before it leaves your device using AES-256 โ€” the same encryption standard used by banks, governments, and defence organisations worldwide.

You type
"Hey, can you review the Q2 report?"
๐Ÿ”‘ Key
AES-256 ยท Qtalk@QualTechEdge@2026@SecureKey
Encrypted
U2FsdGVkX1+mK9vX2Lp8nRqZ3fT7wYhJkL4sBcDmN6eA1oWpQ...

The encrypted version is what travels over the internet and is stored on our server. Even if anyone intercepts it, they cannot read it.

Where Your Data Goes

All data flows exclusively between your device and QualTechEdge's own private server hosted in India on AWS (Amazon Web Services). No data is routed through or stored with any third party.

๐Ÿ“ฑ
Your Android Phone
๐Ÿ’ป
Web Browser
๐ŸŽ
iPhone (Coming Soon)
AES-256 Encrypted ยท HTTPS/TLS ยท End-to-End Secure
๐Ÿ–ฅ๏ธ
QualTechEdge Private Server
AWS EC2 ยท ap-south-1 (Mumbai) ยท Ubuntu 22.04
qtalk.qualtechedge.in
๐Ÿšซ No connection to WhatsApp ยท Google ยท Meta ยท Microsoft ยท or any external platform

Technologies We Use & How They Work

Qtalk is built entirely using open, well-established technologies. Here is what each component does and why it was chosen.

React Native (Expo)
Mobile App Framework
Powers the Android (and future iOS) mobile app. React Native is used by Facebook, Instagram, and Microsoft Teams for their mobile apps.
How it works Compiles into a native Android APK that runs directly on your device. It does not run inside a browser โ€” it is a real app with real native performance.
Node.js + Express
Backend Server
Runs on our private AWS server and handles all API requests โ€” login, messages, meetings, tasks, and more. Used by LinkedIn, Netflix, and Uber.
How it works When you send a message, it goes to our Node.js server which encrypts it, stores it in our database, and delivers it to the recipient. Nothing passes through any external server.
Socket.IO (WebSocket)
Real-Time Messaging
Enables instant message delivery without refreshing. This is the same technology used by WhatsApp and Slack for real-time communication.
How it works Maintains a persistent encrypted connection between your app and our server. When someone sends you a message, it arrives in under 100ms without any polling.
PostgreSQL 14
Database
Stores all messages, user profiles, and application data on our private server. PostgreSQL is used by Apple, Instagram, and the UK Government.
How it works All data is stored encrypted on our AWS server in Mumbai. No employee data is ever written to any external database or cloud storage outside our infrastructure.
AES-256 Encryption
Message Security
Every message is encrypted before leaving your device and decrypted only on the recipient's device. Used by banks, militaries, and governments worldwide.
How it works AES-256 uses a 256-bit key โ€” there are more possible keys than atoms in the observable universe. Even our own server cannot read your messages without the app key.
Expo Push Notifications (FCM)
Push Notifications
Delivers message notifications when the app is in background or closed. Uses Firebase Cloud Messaging โ€” Google's standard notification infrastructure.
How it works Our server sends a notification token (not the message content) to FCM. FCM wakes up your app which then fetches the message from our encrypted server. The actual message content never passes through Google's servers.
AWS EC2 + S3
Cloud Infrastructure
QualTechEdge's private server runs on AWS EC2 in the Mumbai region (ap-south-1). Files are stored in our private AWS S3 bucket โ€” inaccessible to anyone outside our team.
How it works The server is exclusively managed by QualTechEdge infrastructure team. AWS provides the hardware, but all data, access controls, and configurations are fully owned and controlled by us.
HTTPS / TLS 1.3
Transport Security
All communication between your device and our server is protected by HTTPS with a valid SSL certificate โ€” the same padlock you see on banking websites.
How it works TLS 1.3 encrypts all data in transit. Even if someone intercepts the connection (e.g., on public Wi-Fi), they would see only unreadable encrypted data โ€” not your messages or credentials.

Our Privacy Commitments to Every Employee

๐Ÿšซ
No Data Selling
Your data is never sold, rented, or shared with any advertiser or third party under any circumstance.
๐Ÿ 
Data Stays In-House
All data remains on QualTechEdge servers in India. It never leaves our infrastructure.
๐Ÿ‘๏ธ
No Surveillance
Qtalk does not monitor personal activity, location, or device usage outside of the app itself.
๐Ÿ”’
Minimum Permissions
The app requests only what is technically necessary. Nothing more, nothing less.
๐Ÿ“–
Full Transparency
This document is our commitment to openness. You have the right to know exactly how this app works.
โšก
Permission On Demand
Storage and gallery access is only triggered when you actively choose to share a file or image.