Privacy Policy

Summary

Anonium is built so that there is almost nothing to protect. We do not ask for a name, an email address or a phone number, and there is no account to create. The only records associated with you are a random code we generate and a delivery address used to send notifications to your device.

What we collect

• A random link code. Six characters generated on our side and assigned to your installation. It is not derived from your device, your identity or anything you provide.
• A notification delivery address. A pointer supplied by the mobile operating system so that messages can reach your device. It contains no personal information and stops working when the app is removed.
• A public encryption key. Generated on your device, used so others can seal messages that only you can open.
• Subscription status. If you subscribe to Premium, a receipt identifier confirming the subscription is active.
• Transient technical data. Standard connection information such as IP address is processed momentarily to deliver a request and apply rate limits. It is not used to build a profile.

What we never collect

We do not collect or request any of the following, at any point:

• Names, usernames, email addresses or phone numbers
• Sign-in through Google, Facebook, Apple or any other identity provider
• Advertising identifiers or cross-app tracking identifiers
• Location data, whether precise or approximate
• Contacts, call logs or the social graph on your device
• Photos, camera, microphone, files or storage contents
• Behavioural analytics that profile an individual user
• Message content, message history, or a record of which link contacted which

Your messages

Messages are encrypted end to end. A key is created on your device for each conversation and sealed to the recipient's public key before anything is transmitted. Our servers relay ciphertext they cannot read and do not retain once delivery has been handed to the notification service.

Because we never hold readable message content, we cannot search it, moderate it, disclose it, or restore it.

Data on your device

Your conversations, drafts, nicknames and settings are stored in encrypted local storage on your phone. This data is never uploaded, backed up or synchronised by us. If you lose or reset your device, that history cannot be recovered by anyone, including us.

Permissions the app requests

• Notifications — so that incoming messages can reach you. The app remains usable if you decline, though messages will not be announced.
• Biometrics — only if you choose to enable the optional fingerprint lock. Biometric data never leaves your device and is never seen by us.
• Billing — only to process a Premium subscription through the app store.

Anonium does not request location, contacts, camera, microphone, storage or any other sensitive permission.

Third parties

Anonium contains no advertising networks and no third-party analytics or tracking software. We use infrastructure providers for hosting and for delivering push notifications; these providers process only the technical data required to route a message and never receive readable message content or any identifying information about you.

We do not sell, rent or share personal information, because we do not hold any.

Payments

Premium subscriptions are billed by the app store, not by us. We receive only a receipt confirming that a subscription is active. We never see your card details, billing address or store account information. See the refunds and subscription terms for details.

Retention and deletion

• Renewing your link permanently retires the previous code. It cannot be reissued or looked up afterwards.
• Deleting your identity from within the app destroys your code and associated record on our side and erases conversations from the device. This is available at any time and requires no request to us.
• Uninstalling the app invalidates the notification delivery address, and stale records are cleared automatically.

There is no archive, no soft delete and no backup from which a deleted record could be restored.

Legal requests

We respond to lawful requests, but we can only ever provide what we hold. There are no message logs, no identities, no contact graphs and no location history to produce. In practice, a request about a specific person cannot be fulfilled, because we have no way to determine which record, if any, belongs to them.

Your rights

Depending on where you live you may have rights to access, correct, export or erase personal data held about you. Anonium is designed so that erasure is immediate and self-service through the app. For access or export requests, note that we cannot link a request to a specific record without personal information to match against — and we deliberately hold none. This limitation is a consequence of the privacy design, not a refusal to comply.

Children

Anonium is not directed at children and should be used in accordance with its app store age rating. We do not knowingly maintain records relating to children, and because we collect no age or identity information we rely on store-level age gating.

Changes to this policy

If this policy changes materially, the updated date at the top of this page will change and the revised policy will be published here before taking effect. Continued use of Anonium after that point constitutes acceptance.

Contact

Questions about this policy can be sent to [email protected]. Anonium is operated by Modullium.