Privacy
Minyma is designed so message and attachment contents are encrypted on sender devices and decrypted on recipient devices. The relay handles delivery, queueing, push, and attachment transfer while Minyma keeps the privacy boundary clear and practical. Voice and translation features are user-started, and private message content is only used for those features when the user explicitly asks or allows it. Weather requests use Apple WeatherKit only when requested.
Minyma Voice can help with drafts, translation, and local navigation, including weather questions, but message content is not read for voice or translation unless you ask or approve it.
When you type or paste a link while composing, your device can fetch that page to build a preview card - so the linked site sees a normal web request from your connection, before you send. The fetch is cookie-free and HTTPS-only; the first attempt identifies nothing, and if a site refuses anonymous visitors, one retry identifies itself as a Minyma preview fetcher. The finished preview travels end-to-end encrypted inside the message: the relay never sees the URL, and the recipient's device shows the card without making any network request. A link you receive is never fetched automatically. Turn generation off any time in Settings → Privacy → Generate Link Previews.
Minyma's production relay, database, and encrypted-media storage run on infrastructure based in the European Union, operated under the EU's data-protection framework (GDPR). Attachments are held only as ciphertext, kept just long enough to be delivered, and removed under the normal retention window and on account deletion. One exception: a group's photo is kept as an encrypted attachment without the short delivery-window expiry, so members and newly added devices can always fetch the group's current photo - like other uploads, it is removed under account-deletion flows. Media downloads are accelerated at the network edge, but what travels there is ciphertext only - the keys stay inside your encrypted conversation.
Draft translation is based on text the user is actively composing. Translating an existing message requires explicit permission before that message content is read for the translation request. Translation happens for the one draft or message you asked about - never in the background, and never across your history.
Minyma Voice is optional and user-started. It can help compose, navigate, translate drafts, open New Message or New Group flows, read public Help, Terms, and Privacy pages aloud, answer WeatherKit weather and forecast questions, and open local tools, but sensitive actions like sending, calling, or reading private message content are gated by explicit intent or confirmation.
Uploaded ciphertext attachments are deleted from the server under Minyma's normal retention and account-deletion flows. Delete Account is intended to remove relay-held devices, queued delivery data, profile information, push tokens, and uploaded ciphertext attachments.
Local reset wipes the current device back to a fresh install. Duress mode does the same instantly - and when account deletion is enabled, the deletion request is signed and sent at the same moment, completing on any working connection.
End-to-end encryption protects content while it is delivered, but a message that has already reached another device is under that device's control. Minyma is careful to separate server deletion from content already downloaded elsewhere.
The service can never put your words in a notification: it only ever holds ciphertext, so the alert it sends says just “New message.” A rich preview - the sender's name and message text - is built on your device, after the sealed message is decrypted locally and the sender's identity is cryptographically verified. If that verification cannot complete, the banner stays generic.
On iPhone and iPad, Minyma can detect screenshots after iOS reports them and can hide sensitive content during active screen recording or mirroring.
iOS reports screenshots after they happen, so no app can guarantee that a screenshot was blocked. Minyma uses the signal for awareness and keeps stronger protection for active recording or mirroring, where sensitive content can be veiled while capture is in progress.