MIVRA · Effective: 19 September 2026 · Revision 1
Privacy Notice
This notice explains, in plain language, what Mivra processes, why it is processed, and your choices.
Data controller
Mivra is provided by KEYLAB OÜ, registration number 14676735, registered in Estonia. Postal address: Männimäe, Pudisoo Küla 74626, Harju maakond/Estonia. Contact bilgi@keylab.eu for privacy or support requests.
Account and identity
Registration uses a username and password. No phone number or email verification is required. Passwords are not stored in plaintext.
Chats and media
Direct and group chats, including supported media, are end-to-end encrypted. The server handles encrypted events for delivery; push notifications contain no plaintext message content.
Device and operations data
Limited session, device, delivery, security, and abuse-prevention metadata is processed to operate and protect the service. Secret keys and plaintext messages are excluded from application logs.
Recovery
Only password-hardened account recovery-code hashes, state, and timestamps are retained. The Matrix encryption recovery key is a separate secret.
Reports and moderation
Only evidence you deliberately submit and necessary event identifiers are processed. Normal chat content is not readable from the operator console. Reports are reviewed by KEYLAB OÜ for security, community-rule, and legal purposes.
Service providers
Apple is used for App Store distribution and push delivery. User-controlled ZeaburOS infrastructure hosts Matrix, PostgreSQL, and Mivra support services. Providers may process only the data needed to perform their role under their applicable terms.
Retention and deletion
Encrypted chat events and media are retained as needed to provide the service and apply user actions such as redaction, leaving a chat, and account deactivation. Short-lived security challenges and rate-limit records are removed after their operational purpose expires. Report, audit, and security records may be retained where needed for safety, legal obligations, or dispute handling.
Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, objection, or portability and may complain to a competent data protection authority. Contact bilgi@keylab.eu and never send a password, access token, private key, or recovery key.