Privacy Policy

1. Our privacy approach

CipherMesh is being designed to minimize personal-data collection. We do not require a phone number or email address to create a CipherMesh identity. We do not sell personal information, use message content for advertising, or build advertising profiles from your conversations.

2. Information processed by the app

Information you create

The app may create cryptographic keys, a public identifier, encrypted conversation data, and related settings. Private keys and recovery information are intended to remain on your device unless you choose to move or back them up.

Network and delivery information

To establish connections and deliver encrypted data, CipherMesh and participating network nodes may temporarily process technical information such as a public key, network address, port, connection status, timestamps, and routing or delivery information. Other network participants may necessarily receive limited network information when communicating directly with your device.

Device permissions

Depending on the features you use, the Android app may request network, notification, nearby-device, Bluetooth, Wi-Fi, camera, microphone, or file/media access. These permissions are used only to provide the feature you choose, and Android controls can be used to revoke them. The final Google Play listing will disclose the permissions used by the released version.

Messages and attachments

Message content and attachments are intended to be encrypted on the sender’s device and decrypted only by the intended recipient. Encrypted packets may pass through or be temporarily held by participating devices for delivery. CipherMesh does not intend to maintain a central, readable archive of your conversations.

3. Website information

This website does not currently provide user accounts, advertising, or marketing trackers. Our hosting provider may automatically process standard request information—such as IP address, browser type, requested page, and timestamp—for security, reliability, and delivery of the website.

4. How information is used

• Provide, secure, and improve CipherMesh;
• Establish peer connections and deliver encrypted communications;
• Respond to support, privacy, or legal inquiries;
• Detect abuse and protect users, the service, and the network;
• Comply with applicable law.

5. Sharing

We may share limited information with infrastructure providers that help deliver the website or app, when required by law, or when necessary to protect rights and safety. Encrypted network data and limited routing information may be processed by participating peer devices as part of delivery. We do not sell personal information.

6. Retention

Locally stored information remains on your device until you delete it, clear app data, or uninstall the app, subject to any recovery or distributed-delivery feature you intentionally use. Temporary network records are retained only as reasonably necessary for connection, delivery, security, and reliability. Support emails are retained as needed to resolve the request and meet legal obligations.

7. Security

We use technical and organizational safeguards appropriate to the nature of the information. No system can guarantee absolute security. You are responsible for protecting your device, private keys, and recovery information; loss of recovery material may make an identity or data permanently inaccessible.

8. Children

CipherMesh is not directed to children under 13, or the minimum digital-consent age required in their jurisdiction. We do not knowingly collect personal information from children. A parent or guardian who believes a child has provided information may contact us.

9. Your choices and rights

You can manage app permissions through Android settings and can delete locally stored app data using device controls. Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of personal information held by us. Contact us to make a request. We may need to verify the request, and decentralized or encrypted data that we cannot identify, access, or control may not be technically retrievable by us.

10. International processing

Because CipherMesh is designed for network communication, information may be processed in countries other than your own. Applicable protections depend on the nature of the data and relevant law.

11. Changes to this policy

We may update this policy as CipherMesh develops or legal requirements change. The “Last updated” date will identify the current version. Material changes will be communicated through the app, website, or another appropriate channel.

12. Contact

For privacy questions or requests, email hello@ciphermesh.dev.