Your conversations. Your control.

What Minyma is built to protect

• Message text
• Attachment contents
• Encrypted voice-note audio sent as an attachment
• Attachment keys shared inside encrypted messages
• Receipts, edits, and deletes carried in encrypted flows
• Voice and video call setup, protected end to end like messages
• Group conversations, with the same per-message protection as 1:1 chats
• Your encryption keys, which never leave your device's secure storage

What supports delivery

• Which user or device is sending
• Which user or device is receiving
• Timing and frequency of messages
• Encrypted attachment size and limited transfer metadata, such as upload/download timing and delivery state
• The relay routes encrypted messages and call setup data, not plaintext message bodies
• The database stores account, device, queue, and delivery state needed to operate the service
• Encrypted-media storage holds ciphertext attachments for delivery, not long-term content archives

Translation only when requested

Draft translation is based on text the user is actively composing. Translating an existing message requires explicit permission before that message content is read for the translation request. Translation happens for the one draft or message you asked about - never in the background, and never across your history.

• Translated drafts are staged before replacing or appending
• Latest-message translation uses a clear consent step
• One approved message means one approved message, not the whole chat history
• Assistant voice language does not automatically translate private content
• Sender names can be read without reading message text
• Translated text is reviewed before it changes a draft
• Opening a picker or tool does not share media or files until the user selects something
• Voice notes are not automatically transcribed
• Declining a translation prompt shares nothing at all

How voice stays bounded

Minyma Voice is optional and user-started. It can help compose, navigate, translate drafts, open New Message or New Group flows, read public Help, Terms, and Privacy pages aloud, answer WeatherKit weather and forecast questions, and open local tools, but sensitive actions like sending, calling, or reading private message content are gated by explicit intent or confirmation.

• Turning voice off stops active voice sessions and hides Minyma Voice controls
• Voice Language defaults to English, supports a broad user-selected language set, and does not auto-switch by default
• Assistant language does not silently translate private messages or public legal/help text unless the user explicitly asks
• WeatherKit, voice, and translation requests are separate user-started flows with their own boundaries
• Local weather asks for current location only for that request; explicit city weather uses the requested place
• Opening camera, files, photos, or contacts stays local until the user chooses what to send
• Reading unread sender names can avoid reading private message contents

EU-based infrastructure

Minyma's production relay, database, and encrypted-media storage run on infrastructure based in the European Union, operated under the EU's data-protection framework (GDPR). Attachments are held only as ciphertext, kept just long enough to be delivered, and removed under the normal retention window and on account deletion. Media downloads are accelerated at the network edge, but what travels there is ciphertext only - the keys stay inside your encrypted conversation.

What Delete Account does

Uploaded ciphertext attachments are deleted from the server under Minyma's normal retention and account-deletion flows. Delete Account is intended to remove relay-held devices, queued delivery data, profile information, push tokens, and uploaded ciphertext attachments.

• It wipes the current device back to onboarding
• It does not erase content already downloaded to other devices

Reset and duress behavior

Local reset wipes the current device back to a fresh install. Duress mode does the same instantly - and when account deletion is enabled, the deletion request is signed and sent at the same moment, completing on any working connection.

• The wipe is immediate and never waits on the network
• A wiped device looks like a fresh install
• These tools are strongest on the current device
• They do not remove content from other users' devices

What remains after delivery

End-to-end encryption protects content while it is delivered, but a message that has already reached another device is under that device's control. Minyma is careful to separate server deletion from content already downloaded elsewhere.

• Deleting your account removes relay-held account data and queued server state
• Messages already downloaded to another user's device are not pulled back from that device
• Local app lock, reset, and duress tools protect the device where they are used