QuiNVarium messenger
Privacy Policy
What we store, why, how long we keep it, and what we cannot see.
Last updated 26 September 2026.
Who is responsible#
QuiNVarium LLC, 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110, United States, is responsible for the data described here. For any question about this policy, or to make a request about your data, write to privacy@quinvarium.ai.
In short#
- No phone number, no SMS, no email address and no password are required to use the service.
- Message content, calls and attachments are end-to-end encrypted; we do not hold the keys.
- An undelivered message waits on our servers, encrypted, for at most 24 hours.
- If you turn on message backups, an encrypted archive of your messages is kept on our servers. We cannot read it, and turning backups off deletes it.
- We do not sell data, show advertising, or use third-party analytics or tracking.
- You can delete your account from inside the application at any time.
Registering without a phone number#
When you create an account, the application generates a recovery phrase on your device and derives your keys from it. We never receive that phrase. We assign you a QuiNVarium number, which is an address inside our service and is not a telephone number, and we store the records needed to deliver messages to you.
What we store, and for how long#
| Data | Retention |
|---|---|
| Account record — QuiNVarium number, account identifier, registered devices and their public keys, and a commitment derived from your recovery phrase that lets us recognise a restored account | Until you delete the account |
| Username and the handle behind its share link | Until you change or remove it |
| Profile name and picture, stored so that people who find you can see who you are — treat them as visible to us | Until you change or delete them |
| Undelivered messages, encrypted | Until delivered, or 24 hours |
| Call set-up messages | 30 seconds |
| Call links — the link's name, encrypted and unreadable to us, its settings and, if approval is required, the participants the administrator approved, in the encrypted form used by call links | Until 90 days after the link was last used; deleted within a further 90 days |
| Group call state — which devices are connected to a call in progress | While the call lasts |
| Attachments, encrypted | 30 days |
| Settings backup, encrypted and unreadable to us | Until you delete the account |
| Message backup, only if you turn backups on — an archive of your message history, encrypted on your device with a key derived from your recovery phrase, and unreadable to us | Until you turn backups off in the app, which deletes it; an archive the app has not refreshed for 90 days is deleted as abandoned |
| Push notification token | While the device is registered |
| Group data, encrypted — group names and pictures are not readable by us | Until the group is removed |
| Spam reports | 7 days |
| Web server logs for this site — address, time, path, response code, browser string. Requests made by the application to our service are not logged at all | 14 days |
How we collect data and what we use it for#
Everything in the table above comes from the application, at the moment you use the feature it belongs to — registering, setting a profile, sending a message, joining a call, turning on backups. We do not collect data in the background, buy it, or receive it about you from anyone else. The web server logs are the only data we collect from the Messenger help pages.
We use this data only to provide the service and keep it safe: to create and recognise your account; to deliver messages, calls and notifications; to keep groups, call links and backups working; and to limit spam and abuse, which is what spam reports, rate limits and the daily count of address-book checks are for. We do not use it for advertising, profiling, analytics or training models, and we do not combine it with data from other sources.
What we cannot see#
The text of your messages, the content of your calls, the files you send and the contents of your settings backup and message backup are encrypted by the application before they reach us. We hold no key that opens them. This is a property of the design, not a promise about our intentions — but it is also why we cannot help you recover what you have lost, and why we cannot scan conversations for illegal material.
Calls#
Calls are placed directly between the devices where the network allows it. Where it does not, the media passes through a relay we operate, which necessarily handles the IP addresses of both devices for the duration of the call. We do not store those addresses after the call ends. The content of the call is encrypted end to end in either case. Group calls, and calls joined through a call link, always pass through a server we operate that forwards the encrypted media between participants; it handles their IP addresses for the duration of the call and does not store them.
Your address book#
Access to your contacts is optional and the service works without it. If you grant it, the application sends only the QuiNVarium numbers found in your address book to our server, which answers which of them belong to accounts, so you do not have to type them again. Names, telephone numbers and everything else in your address book stay on the device. The numbers checked are not stored — only a daily count, used to limit abuse.
Notifications#
To deliver a notification while the app is closed, we send it to Apple's push service together with the token that identifies your device. The notification tells your device that something has arrived; the message itself is fetched and decrypted on the device.
Link previews#
When you type a link into a message, our server fetches that page and its preview image for you, so the site behind the link sees our server's address, not yours. The page and the link are not stored after the preview is built. You can turn previews off in Settings › Chats › Generate Link Previews.
These help pages#
The Messenger help pages on quinvarium.wiki use no cookies, no analytics and no third-party trackers.
Who else receives data#
We do not sell personal data and we do not share it for advertising. Data reaches others only where the service cannot work otherwise: Apple, for push notifications and app distribution; the provider that hosts our servers, which handles the traffic that passes through it; and public authorities, where we are presented with valid legal process.
Each of them receives only the data described in this policy, and only for the purpose described. We share data only with parties that give it the same or equal protection as this policy: Apple handles push tokens and notifications under its own privacy commitments, and our hosting provider runs our servers and receives no data from us for any purpose of its own. The application contains no third-party analytics, advertising or tracking code.
Legal requests#
We respond to valid legal process addressed to the company. What we are able to produce is limited to the fields listed above — an account identifier, a QuiNVarium number, registration and connection records, and a push token. We cannot produce message content, because we cannot decrypt it. Requests go to legal@quinvarium.ai.
Your choices and rights#
You can delete your account at any time from inside the application; see Delete your account for what that removes. You can change or remove your profile and username at any time, and you can withdraw the contacts permission in your device's settings. If you use message backups, turn them off before deleting your account: a backup is stored under an identifier our server cannot link to your account, so deleting the account does not reach it.
Depending on where you live, you may have the right to ask for a copy of the data we hold about you, to have it corrected or erased, to object to or restrict its processing, and to complain to your data protection authority. Write to privacy@quinvarium.ai and we will answer. Because an account is identified only by its keys, we may be unable to act on a request we cannot tie to an account — we will not ask you for identity documents to prove ownership.
Optional features rely on your choice, and you can withdraw it at any time by turning the feature off: link previews in Settings › Chats › Generate Link Previews; message backups in Settings › Backups, which deletes the backup; and access to your contacts in your device's settings.
Children#
The service is for people aged 18 and over. We do not knowingly collect data from anyone younger. If you believe a child is using the service, write to child-safety@quinvarium.ai.
Changes#
We may update this policy. The new version appears on this page with a new date, and material changes are announced in the application.
Contact#
privacy@quinvarium.ai