Data Storage

Peace of mind assured!

Stay informed about the reality.
It’s smart, you know what you need.

Zukka supports 3 methods of data storage, covering chat messages, contacts, and the SecureBox.

Basic

The data is stored on your device. This is the most common method, and almost all applications use it.

It’s fast because the data is stored on your phone.

You can view messages even offline.

You don’t take up storage or bandwidth from the companies, so it’s more efficient for them.

There’s no liability with government authorities because they don’t have the data or encryption keys.

The data is transparent in your device’s memory. They’re protected with encryption only during transfer (end-to-end) (Viber, WhatsApp, Messenger, etc.).

The data is encrypted but stored on the device. Of course, the decryption keys are also stored there (Signal, Threema, Wire, etc.).

Question:

What happens if you lose your phone or it’s forcibly taken from you? It’s almost certain they will have access to your data. If you don’t believe it, ask an expert. Essentially, this method benefits the companies, which is why it’s so widespread.

Smart *

The encrypted data consists of the data + keys. Zukka uses a different encryption key for each pair or group of chat participants.

Raw data is useless (garbage) without the keys.

Keys on their own are useless (garbage) without the data.

In Zukka, we take advantage of this assumption by ensuring:

The data is stored on the server and the keys are stored on the device (smart storage).

So:

Don’t worry, if someone gains access to your data (for example, if you lose your mobile phone), they won’t be able to do anything useful with it. This is because they would need the keys to access the data from the server in order to retrieve any information. The same applies in the other direction: if someone has your data from the server but doesn’t have the keys from your device, they still won’t be able to do anything useful with it.

It is a simple, smart, reliable and recommended method.

Why don’t you store the data, which is more, on the device?

Because when someone has the data without the keys, they can perform a brute force attack, especially with the future development of quantum computers. Taking data from the server is much harder — unless it’s a terrorist organization or criminal activity — which is strictly prohibited by our policy (TOS).

How secure is my data on the server?

If hackers access the data, it is essentially useless (garbage) without the encryption keys. If it’s a terrorist organization or criminal activity — which is strictly prohibited by our policy (TOS) — then after the completion of legal proceedings, if they also have access to your mobile phone, YES, they could potentially view your information.

Master *

None of your data (data + keys) — except for what you’re currently processing — is stored on your device. Additionally, none of your data (data + keys) is stored on our servers. All of your data (data + keys) is stored on a device you have designated as your master device, which is kept in a secure location. You can also combine this with a proxy or Tor connection if you wish. This master device can be a mobile phone, PC, notebook, etc.

Absolute data protection — only you know where your data truly is located.

Option for additional master backup devices for extra safety.

Potential delays if the connection is slow.

Possible loss of access if the master device is not connected.

How it works :

Storage: The data leaves your mobile and is sent to the Zukka server, which then sends it to your master devices for storage.

Reading: Your mobile requests data from Zukka. When Zukka detects a master device, it requests the data from the master, receives it, and sends it to your mobile (Note: your mobile does not know where the data came from).

Other: Similar processes are used for other tasks like deleting, etc.

Integrity: There are mechanisms in place to prevent data loss to the master device, such as temporary storage on the server and delivery after recovery.

Custom solution:

If you are a company, bank, or government security agency and require a privately owned system with dedicated servers and a white-label app, we can provide a tailored offer after a detailed review of your requirements!