Mitrava - Privacy Policy

 Privacy Policy

Effective Date: August 31, 2026

This Privacy Policy explains how Mitrava(the "App") collects, uses, stores, and shares information when you use our mobile application. We are committed to being transparent about how the App works and to handling user information responsibly.

By using the App, you acknowledge and agree to the collection and use of information described in this policy.

1. Information We Collect

We collect information that is necessary to provide account access, collaboration features, and secure sharing in the App.

 1.1 Account Information

We may collect:

- Name or display name

- Username

- Email address

- Profile photo, if you choose to upload one

- City or regional area location (provided during registration)

This information is used to create and manage your account, identify you in shared rooms, support sign-in and account recovery, and customize localized features.

 1.2 User-Generated Content

The App allows you to create and share content within collaborative rooms. This may include:

- Photos and images

- Drawings, stickers, and text content

- Voice recordings

- Video recordings

- Room metadata, such as room name, invited members, and collaboration activity

This content is stored so it can be shared with the people you invite into your rooms.

 1.3 Device and App Information

We may collect limited technical information, including:

- Device model and operating system version

- App version

- Crash reports and diagnostic logs

- Push notification token for delivery of in-app alerts

- Limited usage data necessary to maintain app stability and performance

 1.4 Local Storage on Device

The App may store certain preferences and temporary session data locally on your device, such as:

- Login session state

- Room preferences

- Local encrypted data needed to restore access to your content

- Cached content required for faster use of the App

 2. How We Use Information

We use your information to:

- Create and maintain your account

- Provide room access and collaboration features

- Securely store and sync your content with invited members

- Support QR-based invitation flows

- Deliver push notifications for room activity

- Improve app stability, performance, and security

- Respond to support requests and enforce our policies

 3. Permissions We Request

The App may request access to the following device features:

- Camera: to take photos, upload images, or scan QR invite codes

- Photos / Media / Files: to select or upload existing images and media

- Microphone: to record voice notes

- Notifications: to send updates and alerts related to room activity

- Internet / Network Access: to sync content and communicate with our backend services

We only request these permissions when needed to operate the relevant feature.

 4. Sharing of Information

We do not sell personal information.

We may share information only in the following limited circumstances:

- With other users in the rooms or groups you join, as required for collaboration features

- With trusted service providers that help us operate the App, including hosting, authentication, storage, notification delivery, and technical support

- When required by law, court order, or legal process

- To protect the rights, safety, or security of our users or the App

Please note that any content you share in a room may be visible to the members of that room, as designed by the App.

 5. Data Security and End-to-End Encryption (E2EE)

We prioritize user privacy and implement industry-standard safeguards to protect your personal information:

 5.1 End-to-End Encryption (E2EE)

To protect your shared media and content, the App employs **End-to-End Encryption (E2EE)** across all user-uploaded room content (including photos, videos, voice notes, text stickers, doodle drawings, custom stickers, profile/room avatars, and custom theme backgrounds):

- **Local Encryption**: Photos, videos, voice recordings, text stickers, doodle drawings, custom stickers, avatars, and custom theme images are encrypted directly on your device using 256-bit AES-GCM cryptographic algorithms before they are uploaded to our hosting servers.

- **Zero-Knowledge Storage**: Room encryption keys are generated locally and stored securely inside your device's private vault. We do not have access to, nor do we store, your private encryption keys on our servers. Consequently, **we cannot decrypt, read, or monitor your encrypted photos, videos, voice notes, text, or room content.**

- **Authorized Sharing**: Only users whom you explicitly invite (via secure QR codes or invite links) can receive the keys required to decrypt and view the room content.

 5.2 Device and Transmission Security

We use HTTPS and Secure Sockets Layer (SSL) protocols to protect account metadata in transit. While we take every effort to secure data, no method of transmission is completely risk-free. You are responsible for keeping your device secure and protecting your identity keys or device credentials.

 6. Data Retention and Deletion

We retain personal and user-generated information only for as long as needed to provide the App and comply with applicable legal requirements.

If you delete content, it may be removed from active storage and sync systems as soon as processing is complete. If you delete your account, we may remove associated personal data and room content in accordance with our deletion process.

If you want to request account or data deletion, contact the developer support email listed in the App or in the Google Play Console listing. We will review and process valid removal requests in accordance with applicable law.

 7. Third-Party Services and Advertising

The App utilizes third-party services that support hosting, authentication, notifications, storage, and app performance. These services may process limited user data as necessary to provide those functions.

 7.1 Google AdMob

We use Google AdMob to display advertisements in the App. To serve ads, prevent fraud, and compile analytics, the Google AdMob SDK automatically collects and processes certain user and device information, including:

- Google Advertising ID (AD_ID)

- Device identifiers and diagnostic/performance logs

- IP address and approximate location

- Ad interaction data (views, clicks, and impressions)

For more information on how Google handles and protects your data, please review the [Google Privacy & Terms Policy](https://policies.google.com/privacy). You can manage personalized ad settings or reset your Advertising ID via your Android device's security settings.

 8. Data Storage and Server Location

Your account information, content, and related metadata may be stored on secure servers operated by our hosting and service providers. The exact server location may vary depending on the provider and region used to support the App, authentication, notifications, and storage services.

We use service providers that maintain appropriate security measures for processing and storage of user data in connection with the App.

 9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the App, legal requirements, or service operations. Any material changes will be communicated through the App or by updating the effective date above.

Your continued use of the App after such changes indicates your acceptance of the updated policy.

 10. Contact Us

If you have questions about this Privacy Policy, data deletion requests, or app privacy practices, please contact the developer using the support email address listed in the Google Play Console or provided in the App.

This Privacy Policy is intended to explain the App’s privacy practices in a clear and transparent manner and to support compliance with applicable privacy requirements.