Privacy Policy

Introduction

Mitramo ("we," "our," or "us") is a messaging app by Varnas Tech Solutions. This Privacy Policy explains what information we collect when you use the Mitramo mobile and web apps, how we use it, and the choices you have.

Your messages are end-to-end encrypted. Messages, photos, videos, voice notes and files are encrypted on your device and can only be decrypted by the devices in that chat. Our servers store and deliver them, but we cannot read them.

1. Information We Collect

Account Information

• Mobile number or email address: used to sign in with a one-time code (OTP). No password is stored.
• Profile: the display name, "about" text and profile photo you choose to add. Your profile photo is not end-to-end encrypted.

Messages and Media

We store your messages and media only in encrypted form, so that they can be delivered to devices that are offline. Alongside them we keep the information needed to deliver them:

• Who sent a message, to which chat, and when
• The message type (text, photo, video, voice note, file), and the size of encrypted media
• Delivered and read status

Chat Backup

Chat backup is required to use Mitramo. We store a backup key that can open your chat history, encrypted with a 6-digit PIN that you choose and only you know. We never receive your PIN. To read your history on a new device you enter the PIN; after 5 wrong PINs the backup is locked for an hour. We cannot recover a forgotten PIN. A short PIN is weaker than your device keys, so keep it private.

Chats and Groups

• The chats you are part of, group names and photos, group members and their roles (admin or member)
• When you joined or left a group, and chats you have muted

Contacts

If you allow access to your address book, the app sends the phone numbers and email addresses in it to our server over an encrypted connection, only to check which of your contacts use Mitramo. We do not store your address book. You can also add someone manually by their number or email instead.

Device and Technical Information

• Devices: the name and platform (Android, iOS or web) of each device you sign in on, its public encryption key, and when it was last active
• Push token: a Firebase Cloud Messaging token so we can notify you of new messages
• Online status: whether you are online and when you were last seen
• Server logs: IP address, device/browser type and request times, used to run and protect the service

2. What We Cannot See

• The content of your messages, photos, videos, voice notes and files
• The private encryption keys on your devices. They are created on your device and never leave it.

Notifications we send say only "New message". The message itself is decrypted on your device. If you lose every device you are signed in on and also forget your backup PIN, older messages cannot be recovered.

3. How We Use Your Information

• Create your account and sign you in with one-time codes
• Deliver messages and media to the right devices, and show delivered and read status
• Show your name, photo and online status to the people you chat with
• Help you find contacts who use Mitramo
• Send new-message notifications
• Keep the service secure, for example by limiting repeated sign-in attempts and signing out compromised devices
• Respond to your support requests

We do not use your information for advertising, and we do not sell it.

4. What Other Users Can See

• Anyone who finds you on Mitramo by your number or email: your display name, about text, profile photo, online status and last seen.
• People you share a chat or group with: the above, plus your mobile number or email address.
• Group members: the messages you send to that group, and changes such as members joining or leaving.

5. Services We Use

We do not sell your personal information. We share only what each provider needs to do its job:

We may also disclose information when required by law, such as in response to a valid court order. Because messages are end-to-end encrypted, we cannot provide their content.

6. Data Storage and Security

• End-to-end encryption for all messages and media
• TLS encryption for all traffic between the apps and our servers
• Sign-in codes expire after 10 minutes and stop working after repeated wrong attempts
• You can be signed in on one phone and one web browser at a time. Signing in on another phone (or browser) signs the previous one out.
• Each device has its own session, which you can sign out at any time from Settings → Linked devices

Our servers are hosted with Oracle Cloud Infrastructure.

7. Data Retention

• Account and profile: kept while your account exists.
• Encrypted messages and media: kept so your devices can load chat history. If you delete a message for everyone, its encrypted content is removed from our servers.
• Sign-in codes: expire after 10 minutes and cannot be reused.
• Sessions: a device stays signed in while it is used at least once every 180 days.

8. Your Rights and Choices

• Update your name, about text and photo at any time in Settings → Profile.
• Contacts access can be turned off in your device settings.
• Notifications can be turned off in your device settings, or muted per chat.
• Sign out any of your devices from Settings → Linked devices.
• Delete your account: follow the steps on our account deletion page. We will delete your account, profile, messages and the data linked to it.

9. Children's Privacy

Mitramo is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, please contact us and we will delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the "Last Updated" date. For significant changes we will also notify you in the app. Continuing to use Mitramo after a change means you accept the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or want to delete your account, contact us:

📧 Email: contact@varnastechsolutions.com
🌐 Website: https://www.varnastechsolutions.com