Privacy Policy

Last updated: 11 July 2026

1. Our promise in one paragraph

Mivloc was built so that your conversations stay yours. Messages are encrypted on your device with AES-256 before they reach us, our servers store only ciphertext, and the secret codes that unlock your chats never leave your device. We cannot read your messages — by design. We run no advertising trackers and no third-party analytics. This policy explains the small amount of data we do handle, and why.

2. Data we collect

  • Account details — your display name, email address (verified at signup), username, and an optional phone number if you choose to add one.
  • Encrypted message content — messages are stored only as base64-encoded AES-GCM-256 ciphertext. Without the code you set on your device, this data is unreadable to us and to anyone else.
  • Connection metadata — basic records needed to run a messaging service: who your accepted contacts are, when a chat room exists, and message timestamps.
  • Referral code — if you sign up through a friend’s invite link, their referral code is kept in your browser and linked to your account at signup so we can connect you.
  • Server logs — like nearly every website, our infrastructure keeps short-lived technical logs (such as IP address and request time) for security and debugging.

3. Data we do not collect

  • We never see or store your chat unlock codes — they are turned into encryption keys locally on your device.
  • We do not store readable message content, and messages in one-time chats are deleted the moment either person leaves.
  • We use no advertising networks, no ad trackers, and no third-party analytics scripts.
  • We do not sell, rent, or trade your personal data to anyone.

4. How we use your data

  • to create and secure your account and verify your email;
  • to deliver encrypted messages between you and your contacts;
  • to connect you with the friend whose invite link you used;
  • to protect the Service against abuse, spam, and security incidents;
  • to comply with legal obligations where genuinely required.

5. Where your data lives

Mivloc runs on the following infrastructure providers, which act as data processors on our behalf:

  • Supabase — authentication and database hosting (account details and encrypted message data).
  • Contabo — the virtual server that serves the Mivloc website.
  • Google Fonts — the Poppins typeface is loaded from Google’s servers, which means your browser sends your IP address to Google when the page loads.

6. Cookies and local storage

Mivloc uses only essential cookies (to keep you signed in) and a small amount of browser local storage (your theme choice and, temporarily, a referral code). Details are in our Cookie Policy.

7. How long we keep data

  • One-time chats — deleted permanently the moment either participant leaves.
  • Regular chats — stored as ciphertext until you delete them or your account.
  • Account details — kept while your account exists.
  • Server logs — kept briefly for security, then rotated out.

8. Your rights

You can ask us at any time to access, correct, or delete the personal data we hold about you (your account details — remember that message content is unreadable to us either way). Depending on where you live, you may have additional rights under laws such as India’s DPDP Act or the EU GDPR. To exercise any right, email support@mivloc.online from your registered address and we will respond as quickly as we can. Deleting your account removes your profile and your encrypted conversations.

9. Security

All traffic to Mivloc is encrypted in transit with TLS (HTTPS). Message content is additionally encrypted end-to-end on your device with AES-GCM-256, and the per-chat codes that protect it are strengthened with PBKDF2 and never transmitted. No system is perfectly secure, but our ciphertext-only design means that even a full breach of our servers would not expose readable conversations.

10. Children

Mivloc is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has created an account, contact us and we will delete it.

11. Changes to this policy

If we change this policy, we will update the “Last updated” date above. Material changes will be highlighted on the website. Continued use of the Service after changes take effect means you accept the revised policy.

12. Contact

Privacy questions or requests: support@mivloc.online.