Our Privacy Commitment: Mitra is built with privacy and security at its core. Your messages, calls, media, and personal information are protected using industry-standard encryption, zero ad tracking, and privacy-preserving contact matching.
1. Information We Collect
We collect information to provide, improve, and secure our messaging and calling services:
Account Information: Your phone number and verification OTP (via Firebase Auth) required to establish your account, along with your optional display name, username, and profile photo.
Messages and Media: Messages in transit are encrypted. Media files (photos, videos, documents, voice notes) are stored securely with expiring signed URLs and automatic expiration policies.
Contacts: With your permission, your address book phone numbers are hashed using SHA-256 for privacy-preserving contact discovery without storing your contacts' raw phone books on our servers.
Call Information: WebRTC peer connection telemetry for voice and video calling quality (duration, connection status). Call audio and video streams are peer-to-peer and never recorded.
2. How We Use Information
Your information is used solely to:
Deliver real-time text, voice, and video messaging.
Facilitate instant WebRTC peer-to-peer calls.
Detect and prevent spam, account abuse, and security violations.
Deliver push notifications via Firebase Cloud Messaging (FCM).
3. Data Retention and Disappearing Messages
Mitra supports configurable disappearing messages with retention periods of 24 hours, 7 days, and 90 days. When configured, expired messages and their media attachments are permanently deleted from database and storage clusters.
4. Data Sharing & Third Parties
We never sell, rent, or monetize your personal data. Data is only processed through essential infrastructure providers:
Firebase: Phone number OTP verification and push notification delivery.
WebRTC STUN/TURN: NAT traversal for live audio/video calls.
5. Your Rights & Account Deletion
You can edit your profile, block unwanted users, manage disappearing messages, or delete your account and associated session data at any time from the app Settings.
6. Contact Us
If you have any questions regarding this Privacy Policy, please contact us at support@whatsmsg.in.