Privacy Policy
Zumitomi Oy — privis.app
Last updated: 7 June 2026
Using the Privis Alerts Android app? Its data practices are covered separately in the Privis Alerts Privacy Policy.
1. Introduction
Zumitomi Oy (“we”, “us”) operates privis.app with a strong commitment to protecting your privacy. This Privacy Policy explains what little data we collect and how we handle it.
2. Data We Collect
We follow a strict data minimization principle:
- Account information: Only a Nickname, hashed username and hashed password.
- No phone number, no email address, and no real name required.
- Technical logs necessary for service operation (e.g. login timestamps, IP addresses for abuse prevention).
- Conversation metadata is minimized. In Medium Mode and Hard Mode, we cannot read message content.
3. How We Use Your Data
We use the collected data only for:
- Providing and securing the messaging service
- Preventing abuse and spam
- Improving the service (anonymized statistics only)
We do not sell your data, use it for advertising, or build user profiles for marketing purposes.
4. Encryption and Message Content
In Hard Mode, messages are end-to-end encrypted. We cannot read them.
In Medium Mode, messages are encrypted with a passphrase agreed on by the users and it does not leave their devices. We cannot read them.
In Easy Mode, messages are encrypted between client and server, but we have the technical ability to access them if legally required. Easy mode messages are auto-deleted in 24 hours. Users can manually delete any of their messages anytime.
5. Data Storage and Location
All user data is stored on servers located in Frankfurt, Germany, under European Union data protection standards (GDPR).
6. Data Retention
We keep data only as long as necessary. Messages are deleted according to your chosen auto-deletion settings. You can delete your account at any time.
7. Your Rights (GDPR)
As a user, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your account and data
- Object to processing of your data
To exercise these rights, please log in. You can always delete everything immediately yourself. Remember that messages are encrypted and usernames are hashed. We cannot find your messages.
8. Third Parties
We do not share your personal data with third parties for marketing purposes. We may share data only when legally required by Finnish or EU authorities. The content is however encrypted.
9. Cookies and Tracking
We do not use any cookies. We do not use tracking cookies or third-party analytics tools that profile users.
10. Changes to This Policy
We may update this Privacy Policy occasionally. Significant changes will be communicated through the service. The ethos of this policy will never change.
Questions about your privacy?
Contact our helpdesk:
https://privis.app/?nick=helpdesk