Privacy Policy

AQYLON IM ("AQYLON", "we", "us", "our") is a secure instant messaging application developed and operated by Qunex Technology LLC, a company registered in Dubai, United Arab Emirates.

Contact:
Email: privacy@aqyl.io
Website: https://aqyl.io

2.1 Account Information

2.2 Messages and Communications

AQYLON IM uses end-to-end encryption (E2EE) for text messages. This means:

• Messages are encrypted on your device before being sent
• Only the sender and recipient can read message content
• AQYLON cannot access the content of your encrypted messages
• Encryption uses industry-standard X25519 key exchange and XSalsa20-Poly1305 authenticated encryption

We do store the following metadata to deliver the service:

• Sender and recipient identifiers
• Message timestamps
• Message type (text, image, voice, file) — not the content
• Delivery and read status

2.3 Calls

Voice and video calls are routed through our servers (LiveKit SFU). We collect:

• Call participants, duration, and type (voice/video)
• Call quality metrics for service improvement

We do not record call audio or video content.

2.4 Media and Files

Photos, videos, documents, and voice messages you share are uploaded to our servers to be delivered to recipients. Shared media is stored on our servers for delivery purposes and subject to our data retention policies.

2.5 Device Information

• Device model, operating system, and app version
• Push notification tokens (for message delivery)
• IP address (for connection and security purposes)
• Login timestamps and session information

2.6 Usage Data

• App crash reports and error logs (for debugging and improving app stability)
• Feature usage patterns (aggregated, not individual)

We use your data exclusively to:

• Provide the service: deliver messages, connect calls, sync contacts
• Secure your account: authentication, fraud prevention, abuse detection
• Improve the app: fix bugs, improve performance, develop features
• Comply with law: respond to valid legal requests from law enforcement

We do NOT:

• Sell your personal data to anyone
• Use your data for advertising or ad targeting
• Share your data with third parties for their marketing purposes
• Read your end-to-end encrypted messages
• Use your data for profiling or automated decision-making

We share your data only in the following limited circumstances:

• With other users: Your profile name, photo, status, and "last seen" time are visible to your contacts (subject to your privacy settings)
• Service providers: We use infrastructure providers (cloud hosting, push notification services) who process data on our behalf under strict contractual obligations
• Legal requirements: We may disclose data when required by law, court order, or government regulation. For encrypted messages, we can only provide metadata (who communicated with whom, when) — not message content
• Safety: To prevent fraud, abuse, or threats to safety

AQYLON IM implements end-to-end encryption for text messages using the following cryptographic protocols:

• Key Exchange: X25519 (Elliptic Curve Diffie-Hellman)
• Message Encryption: XSalsa20-Poly1305 (authenticated encryption)
• Key Storage: Encryption keys are generated and stored on your device only

This means that AQYLON, as the platform operator, does not have the technical ability to read the content of your end-to-end encrypted messages.

When you delete your account, we remove your personal data within 30 days, except where retention is required by applicable law.

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate data
• Deletion: Request deletion of your account and data
• Portability: Receive your data in a portable format
• Restrict processing: Limit how we use your data
• Withdraw consent: Where processing is based on consent

To exercise any of these rights, contact us at privacy@aqyl.io.

Account Deletion

You can delete your account at any time through Settings → Account → Delete Account in the app. Account deletion removes your profile, messages, and associated data from our servers within 30 days.

We implement industry-standard security measures to protect your data:

• End-to-end encryption for text messages
• TLS/SSL encryption for all data in transit
• AES-256 encryption for data at rest
• Secure authentication via Keycloak with multi-factor support
• Regular security reviews and monitoring
• Access controls limiting employee access to user data

AQYLON IM is not intended for use by children under the age of 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly. If you believe a child has provided us with personal data, please contact us at privacy@aqyl.io.

AQYLON is operated by Qunex Technology LLC (Dubai, UAE). Your data may be processed in jurisdictions outside your country of residence, including the United States and India. Where we transfer data internationally, we ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

AQYLON IM uses the following third-party services:

• Firebase Cloud Messaging (Google): For push notification delivery
• LiveKit: For voice and video call infrastructure
• Expo/EAS: For app updates and distribution

These services have their own privacy policies governing their use of data.

AQYLON IM requests the following device permissions:

All permissions are requested only when needed and can be revoked at any time through your device settings.

We may update this privacy policy from time to time. We will notify you of significant changes through the app or by email. The "Last updated" date at the top of this page indicates when the policy was last revised. Continued use of AQYLON IM after changes constitutes acceptance of the updated policy.

In accordance with the Information Technology Act 2000 and the rules made thereunder, the Grievance Officer for India can be contacted at:

Email: grievance@aqyl.io
Response time: Within 24 hours of receipt

If you have questions about this privacy policy or our data practices, contact us:

Qunex Technology LLC
Dubai, United Arab Emirates
Email: privacy@aqyl.io
Website: https://aqyl.io