AviNat Privacy Policy
Last updated: October 8, 2026
AviNat is a messaging and calling app designed so that AviNat has no access to the content of your messages and calls. They are end-to-end encrypted, and only you and the people you communicate with can read or hear them. This policy explains what information we do handle, why, who else is involved, how long we keep it, and your choices.
Who we are. AviNat is provided by SUCCESS SAT FZC LLC (trading as AviNat), A-63-00-01-10, Flamingo Villas, Ajman, United Arab Emirates ("AviNat", "we", "us"). We are the data controller for the information described here. Contact: [email protected].
1. The short version
- Messages and normal calls are end-to-end encrypted. That includes text, voice and video calls, voice messages, photos, videos and files in chats. Encryption keys are generated and stored on your devices and are never available to AviNat. Our servers store and relay only encrypted data.
- Post-quantum protection. Messages use hybrid post-quantum encryption, which combines a well-established classical algorithm (X25519) with a post-quantum algorithm (ML-KEM-768), so that message content captured today remains protected against future quantum computers.
- Keys are refreshed automatically, and encrypted messages are deleted from our servers once they have been delivered to every recipient device (after at most 30 days if a device never collects them).
- Some features are not end-to-end encrypted, and the app labels them: translated calls, channels, profile photos and profile information, and the names you give your contacts in AviNat.
- Translated calls send both people's voices to our AI partner (Google; see "Service providers we use") for real-time translation. We do not record or store them.
- We need your phone number to create your account. We never sell your information and we do not use it for advertising. AviNat contains no advertising and no tracking.
- Chat photos, videos, voice messages and files are deleted from our servers 30 days after they are sent. Call records are deleted after 30 days and server logs after 14 days (section 6 lists every period).
- You can delete your account in the app at any time (You > Account > Delete account).
2. Information we collect and how we use it
2.1 Your account
| What | Details | Why |
|---|---|---|
| Phone number | Required to sign up and sign in. We store it in two protected forms: an encrypted copy and a keyed one-way fingerprint (a "hash") used to find your account. We do not store it in plain text. | To create your account, sign you in, let people who have your number find you (if you allow it), and protect against abuse. |
| Profile | Display name (required), and optionally a username, an "About" text and a profile photo. | To show who you are to the people you talk to, according to your privacy settings. |
| Account settings | Privacy choices (for example who can see your photo, About, last seen, phone number, who can find you by number, who can add you to groups), notification and chat preferences. | To apply your choices. |
| Account identifiers | A random account ID and a record of when your account was created, plus the version of the terms you accepted. | To run your account. |
Profile photos are not end-to-end encrypted. They are protected on our servers. We re-encode each photo, remove its metadata (such as location in the photo), store it privately and share it only through short-lived links with people your settings allow. Your name, username and About text are also visible to others according to your settings.
2.2 Sign-in codes
When you sign in, we send a 6-digit code by WhatsApp, Telegram or SMS (your choice) through our verification messaging provider (Bird). That provider receives your phone number and the channel you chose. It generates and checks the code, and our servers never see or store it. We keep a short-lived record of each sign-in attempt and a keyed fingerprint of the approximate network range you connected from (not your full IP address), to limit abuse.
2.3 Finding your contacts (optional)
If you allow access to your contacts, AviNat helps you find which of them use AviNat:
- You choose which contacts AviNat can read (iOS lets you share all or only some). Names stay on your phone.
- Only after you agree, the app sends the phone numbers of those contacts to our server over an encrypted connection, in small batches (up to 10,000 numbers).
- Our server converts each number into a keyed fingerprint, checks it against registered accounts, and returns only the matches. We do not keep the numbers you send or build a copy of your address book.
- On your phone, AviNat keeps the results of these checks (who was found, and a scrambled fingerprint of each number checked, never the number or the name) so your contacts appear right away next time. They are stored encrypted, with a key kept in your phone's Keychain for your account only, not on our servers, and are deleted when you sign out or delete your account. Results older than a week are checked again.
- Strict limits on how often you can check numbers prevent misuse.
- Your contacts' numbers are only matched against people who allow others to find them by phone number.
- When you save someone as a contact in AviNat, we store that link (your account, their account) and any custom name you give them. Custom names are not end-to-end encrypted, so all your devices can show them; only you can see them.
- If you turn on "Sync contact to phone", AviNat can add people you save in AviNat to your iPhone's Contacts.
- Inviting friends. "Invite" opens your phone's own Messages composer (or the share sheet) with a prefilled invitation and the avinat.app link; nothing is sent until you press Send yourself. AviNat never sends invitations or any other message to your contacts from our servers, and we never sell your contacts or their numbers.
Who can find you. By default, people who have your phone number can find you on AviNat. You can change this in You > Privacy > Phone number.
2.4 Messages (end-to-end encrypted)
- Messages, reactions, replies, voice messages, locations you share and the keys for media are encrypted on your device with the Messaging Layer Security (MLS) protocol, an IETF internet standard (RFC 9420), and can only be decrypted by the devices of the people in the chat.
- Hybrid post-quantum encryption. Every chat uses a hybrid ciphersuite that combines X25519 with ML-KEM-768, the post-quantum key-encapsulation standard published by the U.S. National Institute of Standards and Technology (FIPS 203). An attacker would need to break both algorithms to read a message, which protects message content against data being collected today and decrypted later by a quantum computer. There is no unencrypted fallback.
- Automatic key rotation. Each of your devices refreshes its keys in a chat automatically, after about 50 messages it sends or about 7 days of use, and at least every 30 days when a chat is idle. Each refresh replaces the previous keys, which limits how much content any single key could expose.
- Keys stay on your devices. The private keys that decrypt your messages are generated on your device, stored in its encrypted storage, and are never sent to AviNat.
- On your phone, your messages are stored in an encrypted database (SQLCipher). Its key is kept in your iPhone's secure Keychain, available only on that device while it is unlocked and never transferred to another device; the database itself is excluded from iCloud and computer backups.
- Our servers hold the encrypted messages only until they are delivered to every device in the chat, including devices that are offline. AviNat cannot read them. Your chat history lives on your phone; a new phone gets your earlier messages only from your own encrypted chat backup, never from our servers.
- To deliver messages we handle metadata: who sends to whom or to which group, when, message size, and delivery and read status (read receipts follow your settings). Group membership, group names and group photos are stored on our servers.
- Encrypted messages (including encrypted reactions and replies) are deleted from our servers as soon as every recipient device has received and stored them (at the earliest an hour after sending, so a sender's retry still works), and after at most 30 days if a device never collects them. A device that was offline for longer than 30 days shows "Message not available on this device" for what it missed. What stays is the delivery record without any content (which chat, who sent it from which device, when, and its position in the chat), kept while the chat exists so messages stay in order and "delete for everyone" keeps working.
- Message delivery and read times are deleted after 90 days.
- If you "delete for everyone", the encrypted content is wiped from our servers.
2.5 Photos, videos, voice messages and files in chats
- Encrypted on your phone before upload (each file has its own random key, sent inside the end-to-end encrypted message). We store only the encrypted file, with no file name or type visible to us.
- Files are stored on Cloudflare R2 (cloud storage) and deleted from our servers 30 days after the message was sent. Copies already saved on phones stay there. After 30 days the app shows "Media expired" for files that were never downloaded.
- Media you send or open is kept on your phone in protected storage, and removed when you log out or remove the account from the phone.
2.6 Voice and video calls (end-to-end encrypted)
- Normal calls are end-to-end encrypted. Each call gets a fresh key shared only through the encrypted chat, and every audio and video frame is encrypted with it. Our servers cannot hear or see the call.
- How calls connect. Calls between saved contacts may connect directly between the two phones (peer-to-peer). In a direct call, the other person's device can see your IP address, which can reveal your approximate location. Other calls (from people who are not your contacts, group calls, and calls when someone has turned on "Protect IP address in calls") are relayed through our servers, so the other person does not see your IP address. You can turn on "Protect IP address in calls" in You > Privacy > Advanced. Call setup messages for direct calls pass through Cloudflare's network in sealed (encrypted) form.
- Call records we keep: who called whom (or which group), audio or video, when the call started, rang, was answered and ended, why it ended, and whether it connected directly or through our servers. These records appear in your Calls tab and stay as "Deleted account" for others after someone deletes their account. We delete them from our servers 30 days after the call. A call that is part of a safety report is kept with the report.
- Call quality facts: how long a call took to connect, the network type (Wi-Fi or mobile), a coarse region and any failure code. Deleted with the call record, 30 days after the call.
- Incoming calls use Apple's CallKit. If you allow it, iOS may show AviNat calls in the Phone app's Recents, which can sync through your iCloud account (Apple's handling).
2.7 Translated calls (NOT end-to-end encrypted)
A translated call is a separate kind of call in which each person hears the other in their chosen language.
- It is not end-to-end encrypted. The app tells both people this before the call starts. The caller taps Start, the other person must tap Answer, and the call screen shows "Not end-to-end encrypted".
- Before your first translated call, the app tells you that translated calls are processed by our AI partner and asks you to agree. During the call, both people's voices (and video, for a video translated call) go to our servers. Our translation service streams them to our AI partner, Google (Gemini), which returns translated speech and text (captions) in real time.
- We do not record or store the audio, the video, or the transcripts. The captions are sent to the two phones during the call and are not saved by us. The call screen can show the conversation as text (each person's recognized words and their translation, produced by our AI partner); that text exists only on the two phones while the call lasts and is gone when it ends. The translation provider processes the audio under its terms for paid business customers, which do not allow it to use the content to improve its products.
- We keep a record of each translated call (who called whom, when it started, was answered and ended, and how it ended) for 30 days after the call. For AviNat Pro we also keep the number of minutes each call used, without who was called, as a billing record (section 6).
- Translation is automatic and can make mistakes.
2.7a Translated chat (NOT end-to-end encrypted; AviNat Pro)
Translated chat is a separate kind of chat in the Translate tab. Each person writes in their own language and reads the other person in theirs. It is labelled "Not end-to-end encrypted" in the app and is kept apart from your normal, end-to-end encrypted chats.
- Before your first translated chat, the app tells you that translated chat is processed by our AI partner and asks you to agree.
- When you send a translated message, its text goes to our servers. Our servers send it, with up to three earlier messages of the same chat for context, to our AI partner, Google (Gemini), which returns the translation. The provider processes the text under its terms for paid API use, which do not use it to train its models.
- How long we keep it: we keep a translated message (the original and the translation) only until it is delivered. The recipient's phone saves it and confirms delivery. We then delete it from our servers one hour later, which gives the recipient's other signed-in device time to receive it. A message that is never delivered is deleted 30 days after it was sent. This is the same rule as for normal messages.
- Photos, videos, files and voice messages (draft, build 29). You can send them in a translated chat as in a normal chat. They are not translated and are not sent to our AI partner; only a caption you write is translated, like any message. Because translated chat is not end-to-end encrypted, the file is stored on our servers in readable form (in private cloud storage with Cloudflare R2, never public) only until it is delivered, under the same rule as the text: deleted one hour after the recipient's phone confirms delivery, or 30 days after it was sent if it is never delivered. A file you start sending but never send is deleted after 24 hours. When a message is deleted, its files are deleted from storage too. Photos are re-encoded on your phone before sending, which removes location data. Files can be up to 32 MB, like in normal chats. Translated chat media is not scanned by moderation (it is a private 1:1 chat), and you can report and block the person as from any chat.
- Replies, reactions and "Delete for everyone" in a translated chat go through our servers the same way and are deleted the same way. "Delete for everyone" also deletes the message and its files from our servers at once if it has not been delivered yet.
- The notification for a translated message can show its translated text. That text is encrypted for your phone, and Apple sees only "New translated message".
- After delivery, the messages (and their photos, videos, files and voice messages) exist only on the two phones. Each phone keeps up to 300 messages per chat for 90 days, and signing out removes them.
- What we do keep:
- your reading language for each translated chat;
- how many translated messages each account sent in the current and the previous month (a count, used for fair use in AviNat Pro);
- monthly totals of translation use and cost, with no account and no text.
- Translation is automatic and can make mistakes. Some languages are marked "Beta" where quality is lower.
- You can report and block a person from a translated chat as from any chat.
2.8 Channels (NOT end-to-end encrypted)
Channels are one-to-many broadcasts. They can be public (searchable by name or handle, and viewable through a web link without an account) or private (joinable by invite link).
- Channel posts, media and names are not end-to-end encrypted. They are stored on our servers (channel media on Cloudflare R2) and protected by encryption in transit and at rest.
- Followers' identities are hidden from other followers and the public. Admins can see who the post author is.
- When a channel is deleted, its handle is held for 14 days and its content is deleted after 30 days.
- Content moderation: because channels are not end-to-end encrypted, new channel posts, comments, images and channel names, descriptions and photos (public and private channels) are checked automatically for severe harm (for example child sexual abuse material, graphic violence, credible threats, encouragement of self-harm, sale of illegal goods). The text and images are sent to OpenAI's moderation service, which returns category scores. Content that is flagged, or that someone reports, may also be sent to an OpenAI model for a second, context-aware check (for example news reporting versus incitement, or text in Amharic). Content with a very high score for a severe category may be hidden right away until a person reviews it. A person at AviNat makes every final decision (remove, warn, suspend or ban); no account is suspended or banned by an automated system alone. For a flagged or reported item we keep a copy of it, the scores, the recommendation and our decision for 1 year after the case is closed, even if the item is deleted.
- Your chats, groups and calls are never checked this way: they are end-to-end encrypted and we cannot read them.
2.9 Profile posts ("stories")
If you share a profile post, it is visible for 24 hours to the audience you choose (Everyone, My contacts or Nobody). Profile posts are not end-to-end encrypted. They are processed and stored on our servers like profile photos. Your posts are deleted when you delete your account.
2.10 Chat backup (end-to-end encrypted, optional)
If you turn on chat backup:
- Your phone builds one backup file of your messages (and media, if you choose), encrypts it on the phone and uploads it to our storage on Cloudflare R2. Only the newest backup is kept; the previous one is deleted after it is replaced.
- The backup key is created by the app and stored in your iCloud Keychain, which Apple encrypts end to end, so a new iPhone signed in to the same Apple ID can restore it. You can choose a password or a 64-digit key instead. We never receive your key or password, and we cannot read or restore your backup for you.
- To protect against guessing, our server keeps a verifier and the encrypted ("wrapped") key, and locks the backup after 10 wrong attempts.
- Turning backup off, or deleting your account, deletes the backup.
2.11 Location
- Sharing a location in a chat: only when you choose to share it. The app asks for location access "while using the app". The location is sent inside the end-to-end encrypted message; we cannot see it.
- Devices list: to help you spot sign-ins you don't recognize, You > Devices shows the approximate city and country of each signed-in device. We derive it from the country and city our network provider (Cloudflare) associates with your connection. We do not use GPS and we do not store your IP address for this. The place is updated at sign-in and at most every 30 minutes while you use the app, and is removed when the device is logged out. New sign-in alerts keep the city and country for 30 days.
2.12 Devices and push notifications
- For each phone you sign in on, we store: an installation ID, the device model (for example "iPhone 16 Pro", never the name you gave your phone), iOS version, app version, and the time it was last active.
- Push notifications are sent through Apple Push Notification service (APNs), including VoIP pushes for incoming calls. Your push tokens are stored encrypted. Apple sees only a generic notification ("New message", "Incoming call"). The sender's name and chat details are encrypted for your phone and decrypted on the phone.
- Message previews. With Show previews on (the default; You > Notifications), a notification shows who wrote and what they said. The push carries the message only in its end-to-end encrypted form, sealed once more for your phone. Your phone decrypts it with the same keys the app uses, and the text never leaves your phone: we cannot read it, and neither can Apple. With Show previews off, notifications say "New message". iOS's own Show Previews: When Unlocked setting hides the text until your iPhone is unlocked.
2.13 AviNat Pro and purchases
- Purchases are made through Apple. We never see your card or payment details.
- We use RevenueCat to manage subscriptions. RevenueCat receives your random AviNat account ID and your App Store purchase information, plus the device data its software collects to process purchases. We do not give RevenueCat your name, phone number or messages.
- We store your subscription status, renewal and expiry dates, minutes included and used per period, minute-credit purchases and their expiry, and purchase notifications from RevenueCat (deleted after 90 days once processed).
- If you use Customer Center inside the app to contact support, you write the email in your own mail app.
2.14 Support and reports
- Report a problem (You > Help): we receive what you type, any screenshots you choose to attach (stored privately on Cloudflare R2 and deleted after 90 days), and basic device facts (app version, build, device model, iOS version, network type). Your report and our replies are deleted 1 year after the report is closed.
- Support messages and AI help. Support messages (including reports and feedback) may be answered with help from our AI partner, OpenAI, which drafts replies from our help articles; a person from our team can help too, and replies written with AI are labelled "AI answered". Before your first support message is sent, the app asks you once whether AI may help. If you choose Only a person, your messages are answered by our team only and are never sent to the AI. We keep your choice with your account. Support chats are not end-to-end encrypted.
- Email to [email protected]: we keep the email and our reply to help you, and delete them 1 year after your request is closed.
- Safety reports: when you report a person, group or channel, we receive the reason you chose and who or what you reported, and we keep the reported account's current profile photo for up to 90 days as evidence. Because chats are end-to-end encrypted, we do not receive message content with a report. Reports and the actions we take (warn, suspend, ban) are kept to keep AviNat safe. A report about a channel, channel post or comment (channels are not end-to-end encrypted) is reviewed together with a copy of the reported content (section 2.8); we keep that record, including who reported it, the reason and the time, for 1 year after the case is closed.
- Blocking: we store who you blocked so we can enforce it.
2.15 Optional AI assistant
AviNat AI is an optional assistant. Before first use the app asks for your consent (18+). What you send to it is not end-to-end encrypted. It is processed by an AI service provider, which does not use it to train models and may keep it for up to 30 days. We store your AI conversations encrypted on our servers until you delete them or they reach the auto-delete time you set.
2.16 Technical information and security
- Our servers use your IP address while handling each request (for example to route it and limit abuse). For abuse limits we keep only a keyed fingerprint of your approximate network range, not your IP address.
- Server logs do not include message content, phone numbers, codes or tokens (they are filtered out). Server logs are deleted after 14 days. Cloudflare, which carries our network traffic, keeps its own logs under its own policies, outside our control.
- We do not use analytics, advertising or crash-reporting services, and we do not track you across other apps or websites. Problems in the app are kept on your phone and are not sent to us.
3. Legal bases (EEA, UK and similar laws)
- Contract: to provide AviNat (account, messaging, calls, backup, purchases, support).
- Consent: contact discovery, location sharing, translated calls (you agree before each call), AI help in support (you choose before your first support message), the AI assistant, push notifications (iOS permission). You can withdraw consent at any time in the app or in iOS Settings.
- Legitimate interests: security, preventing spam and abuse, enforcing our Terms, improving reliability. We balance these against your rights and keep the data minimal.
- Legal obligation: responding to lawful requests and keeping records the law requires.
4. Who we share information with
We do not sell or rent your personal information, and we do not share it for advertising. We share it only with:
| Who | What and why |
|---|---|
| People you communicate with | Your profile (per your settings), messages and calls (end-to-end encrypted), and your IP address in direct calls (section 2.6). |
| Our service providers | The companies listed below, each only for the service named. |
| Authorities | Only when legally required, or to protect someone's life or safety (see "Requests from authorities" below). |
| A buyer or successor | If the company is merged or sold, under this policy. |
Requests from authorities
Because messages and calls are end-to-end encrypted, AviNat is technically unable to provide their content. We disclose limited account information (for example, the account's phone number, profile, account creation date, and the records described in section 6 for the periods we keep them) only when legally required. We review every request carefully, and we challenge requests that are unlawful, overly broad or lack a valid legal basis.
Service providers we use
In the app, AI features say "our AI partner". These are the companies behind AviNat's services:
| Provider | What it does for AviNat |
|---|---|
| Google (Gemini) | Translated calls: the voices (and video, in a video translated call) during the call, to translate them in real time (section 2.7). Translated chat: the text of each translated message (and a photo's or file's caption) and up to three earlier messages for context, never the photos, videos, files or voice messages themselves (section 2.7a). |
| OpenAI | The support assistant: support messages of accounts that allowed AI help (section 2.14). Safety checks of channel content: posts, comments, images and channel names, descriptions and photos, never chats, groups or calls (section 2.8). |
| Cloudflare | Network and security services for our servers, and storage (R2) of encrypted chat media and backups, channel media, translated chat media (until delivered), profile photos and support screenshots; the relay for direct-call setup messages. |
| Hetzner | Our servers and databases (data centers in Finland and Germany). |
| Apple | Push notifications (APNs), CallKit, in-app purchases, iCloud Keychain (backup key, end-to-end encrypted by Apple). |
| Bird | Sign-in codes: your phone number, to send the code by WhatsApp, Telegram or SMS (section 2.2). |
| RevenueCat | Subscriptions, when AviNat Pro is available: your account ID and App Store purchase information (section 2.13). |
Our providers act on our instructions and must protect your information.
5. International transfers
AviNat is used worldwide, so your information may be processed in countries other than yours, including the European Union and the United States. Where required, we use safeguards such as the European Commission's Standard Contractual Clauses.
6. How long we keep information
| Information | How long |
|---|---|
| Account, profile, settings | Until you delete your account. Personal profile data, contacts, profile posts and support requests are erased 24 hours after deletion. |
| Phone number (encrypted and fingerprint) | Until account deletion (erased within 24 hours of deletion). |
| Sign-in attempt records | Short-lived. Codes themselves are never stored by us. |
| Contact numbers sent for discovery | Not kept (checked and discarded). |
| Results of contact discovery (on your phone only, encrypted) | Until you sign out or delete your account; each result is checked again after a week. |
| Saved contacts, custom names, blocks | Until you remove them or delete your account. |
| Encrypted messages waiting to be delivered | Deleted as soon as every recipient device has received them; at most 30 days if a device never collects them. |
| Message delivery records without content (chat, sender, time, position) | While the chat exists. |
| Delivery and read times | 90 days. |
| Chat media (encrypted) | 30 days after the message was sent. |
| Call records (who called whom, when, how long, how it connected) | 30 days after the call. A call in a safety report is kept with the report. |
| Call quality facts | 30 days after the call. |
| Translated call records | 30 days after the call. |
| AviNat Pro minute usage (minutes per call, without who was called) | 13 months as a billing record, then only monthly totals without any identity. |
| Chat backup | Until replaced, turned off or account deletion. Replaced backups are deleted after about 1 hour. |
| Devices list place (city/country) | Until the device logs out; sign-in alerts 30 days. |
| Logged-out device records | Kept as a security record (model name and dates). |
| Push tokens | Until the device logs out or the account is deleted. |
| Purchase records | As long as needed for billing, tax and accounting law. RevenueCat event notifications: 90 days. |
| Support requests (in the app or by email) | 1 year after the request is closed; screenshots 90 days; support assistant records 180 days. |
| Safety reports and actions | As long as needed for safety and legal claims; reported profile photo evidence 90 days. |
| Channel moderation records (copy of the flagged or reported channel content, scores, reports, decisions) | 1 year after the case is closed. Automatic scores of content that was not flagged: 90 days, without the content. |
| Database backups | Encrypted; kept up to 35 days, then deleted. Deleted information can remain in a backup until that backup expires. |
| Server logs | 14 days. |
When you delete your account, messages you already sent stay with the people who received them, as with any messenger, and you appear to them as "Deleted account".
7. Your choices and rights
- In the app: edit your profile; choose who sees your photo, About, last seen, phone number; turn off "find me by phone number"; turn on "Protect IP address in calls"; block people; turn chat backup off; log out other devices; stop contact access, location, camera, microphone and notifications in iOS Settings.
- Delete your account: You > Account > Delete account. You confirm with a code sent to your number. Deleting your account signs out every device, removes you from groups and channels, deletes your backup, and erases your profile and personal data as described above. It does not cancel an AviNat Pro subscription. Cancel that in your Apple Account settings.
- Your rights (depending on where you live): access, correction, deletion, restriction, objection, portability, and withdrawing consent. Californians have the right to know, delete and correct, and to not be discriminated against; we do not sell or share personal information for cross-context behavioral advertising. To make a request, email [email protected] from the app or tell us the phone number on the account; we will verify it is you (usually with a code to that number). We answer within the time the law requires (usually one month).
- You can complain to your local data protection authority.
8. Security
- End-to-end encryption (MLS, RFC 9420) for messages, normal calls, chat media and chat backups.
- Hybrid post-quantum encryption (X25519 with ML-KEM-768) for message content.
- Automatic key rotation (section 2.4).
- Encrypted messages are removed from our servers after delivery (at most 30 days if never collected).
- Encrypted storage on your phone, with keys held in the iOS Keychain.
- Security codes let you confirm, in person or over another channel, that you are talking to the right person, and you can be notified when a contact's security code changes.
- Two-step verification: an optional six-digit PIN required when your phone number is registered on a new phone.
- Encryption in transit (TLS) for all connections; phone numbers and push tokens stored encrypted; strict access controls and audit logs for our staff tools, which never show message content, names or phone numbers.
- No advertising and no sale of personal information.
Metadata described in section 2 (for example, who you communicate with and when) is not end-to-end encrypted, and the features marked "not end-to-end encrypted" in section 2 are protected in transit and at rest but are readable by AviNat's systems. No system is perfectly secure. Keep your phone locked and never share your sign-in code or PIN.
9. Children
AviNat is not for children. You must be at least 13, or the higher minimum age where you live (for example 16 in some EU countries unless a parent consents). We do not knowingly collect information from children under these ages. If you believe a child has an account, contact [email protected] and we will delete it.
10. Changes
We will update this policy as AviNat changes. If a change is significant, we will tell you in the app before it takes effect. The date at the top shows the latest version.
11. Contact
SUCCESS SAT FZC LLC (trading as AviNat), A-63-00-01-10, Flamingo Villas, Ajman, United Arab Emirates Email: [email protected] [EU/UK representative: [NAME, ADDRESS]]
