Privacy Policy

Marivil, published by Murshisoft · Version 2026-08-10

This policy explains what Marivil collects, why, and what we do with it. It describes the service as it actually works today. Where a practice is one you might not expect from a messaging app, we say so plainly rather than leaving it to be inferred.

Your messages and media are end-to-end encrypted. Chats and group messages — text, photos, video, voice notes and documents — are encrypted on your device and can only be read on the devices of the people you send them to. Our servers carry only ciphertext they cannot read, and delete it once it has been delivered. We could not hand over the content of your messages because we do not have it.

What we can still see is metadata, not content: who you exchange messages with, when, how often, and the size of what you send. End-to-end encryption hides what you say, not the fact that you are talking. Voice and video calls are encrypted in transit (see "Calls" below).

Who we are

The service is provided by Murshisoft ("we", "us"). For anything in this policy, including requests about your data, contact privacy@marivil.com.

What we collect

Data	Why	How long
Your phone number	It is your account identifier and how others reach you.	Until you delete your account.
One-time verification codes	To confirm you control the number.	Minutes — they expire and are overwritten.
Profile: display name, "about" text, profile photo	Shown to people you chat with, subject to your privacy settings.	Until changed or the account is deleted.
Messages: text, and photos, video, voice notes, documents	To deliver them. Stored end-to-end encrypted; we cannot read them. Your history lives on your devices, not our servers.	Ciphertext is deleted once delivered (undelivered messages: up to 30 days, then dropped).
Message metadata: sender, recipient, timestamps, delivery and read status	To show ticks, order conversations, and avoid re-delivering.	With the message.
Phone numbers from your address book, if you grant contacts access	To tell you which of your contacts already use Marivil. Numbers are sent to our server in plain form and matched against registered users.	Not stored — they are matched and discarded within the request.
Presence: when you were last online	To show "last seen"/"online", which you can restrict or disable.	Overwritten continuously.
Push notification tokens issued by Apple or Google	To wake your device for a new message or call.	Until the token is revoked; invalid tokens are pruned automatically.
Call signalling data (who called whom, when, connection details)	To set up voice and video calls.	For the duration of the call and short-lived logs.
Server logs: IP address, timestamps, error diagnostics	Security, abuse prevention, and debugging.	Short-lived operational retention.

We do not collect your address book contents beyond phone numbers, we do not track you across other apps or websites, we show no advertising, and we do not sell or rent your data to anyone.

Calls

Voice and video calls connect directly between devices where the network allows. When it does not, the audio and video are relayed through our servers to get through firewalls. Call media is encrypted in transit in both cases.

Where your data is held, and who else touches it

Data is stored on servers we operate. To run the service we necessarily rely on:

Apple Push Notification service and Google Firebase Cloud Messaging — receive a device token and a wake signal. The push carries no message content — only that something arrived — so message text never passes through Apple or Google.
Our hosting providers — operate the physical machines the service runs on.

These providers act on our instructions for the purpose of delivering the service.

Your choices and rights

Privacy settings in the app control who can see your last-seen time, profile photo and "about" text, and whether you send read receipts.
Contacts access is optional, and can be refused or withdrawn in your device settings. The app still works; you just have to type numbers in.
Access, correction and deletion — write to privacy@marivil.com and we will act on your request. Deleting your account removes your profile and any undelivered ciphertext from our servers; delivered messages live on the participants' devices, which are theirs, not ours, and cannot be recalled.

Children

Marivil is not intended for children under 13, and where local law sets a higher age for consenting to online services, that age applies instead.

Security

Connections use TLS, and message content is additionally end-to-end encrypted (see the top of this policy), so the servers that route your messages hold only ciphertext. Encryption keys live on your devices; the private keys never leave them. Access to production systems is restricted, but that restriction protects metadata and undelivered ciphertext — not your message content, which we cannot read regardless.

Changes

If we change this policy in a way that affects you, we will update the version at the top and ask you to accept the new terms in the app.