PhonMail Privacy Policy

This Privacy Policy describes how PhonMail (“we”) handles information in the current PhonMail app operated by Boveja Pharmaceuticals Private Limited.

PhonMail is a communication app with five modules: Trusted Network, Chat, QR Chat, Mail, and Official.

1. Account and authentication

You create an account with a mobile phone number. We use one-time password (OTP) verification through Firebase Authentication. Your phone number is used to sign you in and to identify your account. It is not used as a public profile field.

2. Profile information

You may provide a display name, optional profile photo, and optional bio. These are stored on your account and shown where PhonMail displays your profile to you and, where a feature requires it, to people you communicate with.

3. Contacts

Access to device contacts is optional and is requested only after you see an in-app disclosure and choose to continue. PhonMail does not upload your address book, saved contact names, or raw phone numbers. If you allow contact matching, your device converts numbers into protected identifiers that are sent so PhonMail can find which of your contacts already have an account. Local contact names stay on your device.

4. Content you create

Depending on the module you use, you may send or publish text, images, video, voice notes, documents, or Official channel material. Trusted Network posts are delivered to people you authorize, not to a public global personal feed. Chat and QR Chat are participant-only. Mail is between sender and recipient. Official channels may publish posts and updates to followers and Official discovery surfaces designed for that content.

5. Media and files

Media and files are stored in Google Firebase Storage, except where a private Cloudflare R2 path is selected for that upload. Private R2 paths exist for Trusted Network media, Chat and QR attachments, standard Mail attachments, Mail Original files, and Contact Status media. Each path remains on Firebase Storage unless its own server switch is enabled. A missing or disabled switch keeps that media in Firebase Storage. This description does not mean those switches are enabled.

A completed Mail Original file expires 48 hours after the upload completes. If the recipient first acknowledges delivery before that expiry, the file expires 48 hours after that acknowledgement. An acknowledgement after expiry does not restore the file. Reading, playing, or downloading it does not extend the expiry.

Private Chat, Mail, QR, Trusted Network, and personal Status media are not published as public links.

Official Studio media stays in Firebase Storage. Official Quick photos and videos can be uploaded to a private Cloudflare R2 area. Public Official delivery, including through media.phonmail.com, depends on separate server switches that remain off unless enabled. This description does not mean public Official delivery is enabled. Official material that is published can be shown to followers and on Official discovery surfaces.

6. Infrastructure

PhonMail uses Google Firebase (Authentication, Firestore, Storage, Cloud Functions) and related Google/Play services to operate the app. Cloudflare R2 is used for a private media path only when that path server switch is enabled. Cloudflare may also deliver public Official media when those separate switches are enabled. Those providers process data as needed to deliver the service. Disabled switches are not treated as enabled.

7. Safety

You can block other users. Some features let you report posts, comments, statuses, chat content, or Official channels. We may review reports and may remove content or restrict accounts when we become aware of violations. We do not claim that all content is reviewed before it appears.

8. Account deletion

You can delete your account in Settings. Deletion removes account-owned data we control, then deletes your sign-in. Some processing may take time. Deletion is permanent.

If you cannot use the app, you may also request deletion from the Delete Your PhonMail Account page.

9. Security limits

Chat, Mail, and QR Chat are protected in transit and by authenticated access controls. End-to-end encryption is not currently available. Do not treat PhonMail as an end-to-end encrypted messenger. We keep operational records needed to run and secure the service; we do not claim that nothing is logged or retained.

10. Selling data

We do not sell your personal information.

11. Children’s privacy

PhonMail is not directed at children. Use the app only if you are allowed to have a mobile account under applicable law.

12. Changes

We may update this policy in the app when our practices change.

Privacy and support contact

For privacy questions, contact PhonMail Support at admin@phonmail.com.

Never send an OTP, password, authentication token, secret key or other authentication credential by email.