Privacy Policy

Last updated: August 10, 2026

Enveil is a private messaging service designed to protect conversations with end-to-end encryption. This policy explains what information is processed when you use Enveil and the choices available to you.

Information needed to provide Enveil

When you create an account, we process your email address, chosen handle, display name, account identifier, and authentication information. If you choose to add one, we also process your profile photo.

To deliver the service, we process device-registration information, public encryption keys, recipient and delivery identifiers, timestamps, and limited operational metadata required to route messages and maintain accounts.

Messages, attachments, and calls

Messages and attachments are encrypted on your device before transmission. Enveil’s relay infrastructure stores and forwards encrypted message envelopes and encrypted attachments; it is not designed to read their contents. Voice messages are sent as encrypted attachments.

If you use voice or video calling, connection information is processed by the calling infrastructure needed to establish the call. Enveil does not use message or call content for advertising, profiling, or analytics.

Device permissions

Enveil requests permissions only when you use the related feature: camera access for video calls and safety-number QR scanning; microphone access for calls and voice messages; photo-library access for photos you choose to send or use as a profile photo; and Face ID or device passcode for local app unlock. Speech recognition, when available, is performed on device for voice-message transcription.

How information is used

We use the information above to operate, secure, troubleshoot, and improve Enveil; authenticate users; route encrypted communications; prevent abuse; and respond to support requests. We do not sell personal information, serve third-party advertising, or use cross-app tracking.

Service providers

We use service providers to operate account authentication, encrypted message and attachment relay, and calling infrastructure. They may process the limited information necessary to provide those services under their own security and contractual obligations.

Retention and deletion

Encrypted messages and attachments are retained only as needed for delivery and the service features you choose. Local app data remains on your device subject to your settings. You can request permanent account deletion from Enveil’s account settings; this removes the account and associated remote service data subject to lawful retention requirements.

Security

We use technical and organizational safeguards intended to protect account and service information. No system can guarantee absolute security, and you should keep your device and account credentials secure.

Changes

We may update this policy when Enveil or applicable requirements change. The current version will always be posted on this page.

Contact

For privacy questions or requests, contact support@ciphersuper.xyz.