Privacy Policy

The text of your messages is not stored in our database. The app writes it to your own sovereign data store — an eVault that belongs to you — and keeps a copy on your device so that chats open instantly. Our server holds pointers only: who, to whom, when, and what kind of message, never what it said.

This is how the system is built rather than a promise about it: Meshenger runs on W3DS, where data belongs to the person and an application is given access to it instead of owning it.

And we would rather be plain about what that does not mean. Meshenger is technically able to read what it writes to your eVault, and it does so only for the features you switch on — building a daily summary, or transcribing a recording you made. Your messages are not end-to-end encrypted today, so “not in our database” should not be read as “unreadable by us”.

Post-Platforms Solutions B.V., the Netherlands. Questions and requests: info@postplatforms.com.

• Message skeletons: id, chat, sender, time, kind (text, file, call). No text, no files, no previews.
• Chats: name, participants, time of the last message.
• Identity: your eID identifier (eName), display name and avatar — a copy of what you published yourself.
• Read state: how far you have read in each chat.
• Notification addresses: the technical address your device is reached at.
• Technical diagnostics: counters for errors and connection quality, with no conversation content.

• Apple and Google, when a notification is delivered. A push to a phone is physically delivered by Apple (iPhone) or Google (Android), and it carries who wrote to you and the beginning of the text — otherwise the notification could not say who it was from. Turning notifications off removes this path.
• An AI provider, for transcription and summaries. If you use call-recording transcription or daily chat summaries, the relevant messages and audio are sent to an external AI provider for processing and are not used to train models. Without those features no content is sent anywhere.
• The people in your chats — obvious, but worth saying: what you write is seen by those you write to, and stays in their copies.

We do not sell data, share it with ad networks, or track you.

Under the GDPR we rely on three bases. Running the service you asked for — delivering messages, placing calls, keeping you signed in — is the performance of our agreement with you (Art. 6(1)(b)). Keeping the service working and secure — error counters, connection quality, abuse prevention — is our legitimate interest (Art. 6(1)(f)). Optional features you switch on, such as transcription and daily summaries, rest on your consent (Art. 6(1)(a)), and switching them off withdraws it.

Our servers are in Germany. Three things necessarily leave the EU, and only those: notifications pass through Apple (United States) or Google (United States) on their way to your device, and transcription and summaries are processed by Anthropic (United States) and OpenAI (United States) when you use those features. Each processes the data under a data-processing agreement with us that includes the European Commission's standard contractual clauses. We send them only what the feature needs, and nothing at all if you do not use it.

Everything travels over TLS; calls are encrypted in transit with DTLS-SRTP. Access to the server is restricted to the people who operate it. As said above, messages are not end-to-end encrypted, so we state the limit rather than imply a guarantee we do not make.

We set two cookies and neither is for advertising or analytics: w3ds_auth keeps you signed in, and w3ds_auth_pending_session lives for five minutes while you approve a sign-in in your eID wallet. Your browser's local storage holds your own device's copy of your chats and settings; it never leaves the device by itself.

Calls are relayed through our server. A call is recorded only when a participant turns recording on, and everyone in the call can see that it is on. The recording is stored in the recorder's own data store and is available to the chat's participants.

For as long as you use Meshenger. You can delete everything we hold from the app's settings: chats, message skeletons, your identity, read state and notification addresses.

What that deletion does not touch: the text of your messages in your own eVault and your eID identity — those are yours, and you control them, not us. Copies your correspondents hold remain theirs.

Under the GDPR you may ask for access to what we hold, correction, erasure, restriction of processing, and portability — a copy in a machine-readable form. You may object to processing based on our legitimate interest, and withdraw consent for the optional features at any time by switching them off. You may also complain to a supervisory authority; in the Netherlands that is the Autoriteit Persoonsgegevens. We answer requests within one month. Write to info@postplatforms.com.

Meshenger is not intended for children under 16. That is the age the Netherlands sets under Article 8 GDPR for a child to consent on their own to an online service; below it the law requires a parent's consent, which we have no way to obtain.

We make no decisions about you by automated means, and we do not profile you.

If what we store or who we send it to changes, this page changes with it, with a new date at the top.