Privacy Policy

Last updated: September 21, 2026

Pravida is built on a simple principle: your conversations are yours. Every message is encrypted on your device before it goes anywhere, with keys that never leave it. There is no Pravida account, no phone number, no server of ours, no analytics and no advertising. We cannot read your messages, and we have built nothing that could.

1. What We Don't Collect

Prava Labs does not collect, store, or receive:

Your messages, photos, videos, files or voice messages, in any form
Your name, phone number, email address or contacts
Your location
The names or members of your chats
Analytics or usage telemetry
Crash reports sent to any server of ours (diagnostics are logged on the device only)
Device identifiers, fingerprints, or advertising identifiers

Pravida's App Store privacy label declares no tracking and no collected data. The one identifier the app creates, a random id generated on your device, is used to route encrypted records and is not linked to your name, email or phone number.

2. End-to-End Encryption

Every message and every attachment is encrypted on your device with AES‑256‑GCM before it leaves. Keys are generated on the device and stored in its Keychain. Prava Labs runs no servers, operates no key server and holds no keys. Only the members of a chat can decrypt what is sent in it.

Pravida uses Apple's CryptoKit with standard algorithms: Curve25519 identity keys, HKDF‑SHA256 key derivation and AES‑256‑GCM. The product page says plainly what this does and does not protect against.

3. Connections Pravida Makes

Pravida makes network connections only to:

Apple iCloud (CloudKit) — to relay encrypted messages, receipts and member announcements between members who are not nearby, and to update the app. iCloud stores ciphertext together with the fields it needs to deliver it: an app-generated sender id, recipient id, chat id and timestamp, and your chosen display name. It never sees message content. This traffic is governed by Apple's privacy policy for iCloud.
Nearby devices — over Wi‑Fi on the same network or peer‑to‑peer Wi‑Fi, using Apple's MultipeerConnectivity, to exchange encrypted messages directly with other members. Nearby devices can see that a Pravida chat is being advertised and its id, not its contents. Pravida does not use Bluetooth.
Apple Push Notification service — iCloud sends a silent push to wake the app when a record arrives. The push carries no content.
Websites you paste a link to — to fetch a link preview, from your device, as any browser would. This is the only time the app connects anywhere else, and only for links in your own chats.

Pravida never routes your data through Prava Labs servers, because there are none.

4. Permissions

Local Network — to discover nearby members and send encrypted messages directly between devices. Without it, messages go through iCloud only.
Camera — to scan a QR‑code invite. Nothing is recorded.
Microphone — to record voice messages, which are encrypted before they leave the device.
Face ID / Touch ID / Optic ID — to open the app when App Lock is on. Biometric data never leaves the Secure Enclave and is never seen by the app.
Notifications — to tell you a message arrived while the chat was not open. Notifications are created on the device; no notification service of ours is involved.
Photos and Files — only for the items you choose to send, through the system pickers.

Every permission can be declined, and the app says what it will do without it.

5. On-Device Intelligence

Smart replies, unread summaries, translation and the pre-send sentiment check run on Apple's on-device model on hardware with Apple Intelligence. Your messages are never sent to Prava Labs, Apple or any third party for these features. Where the model is not available, the features are absent. Settings › Intelligence turns them off.

6. What Stays on Your Device

Your chats, keys and settings are stored on your device under the operating system's file protection. Backups you create are encrypted with the chat's own key before they are written. Deleting the app, or choosing Delete All Data in Settings, removes everything from that device. Copies already delivered to other members remain on their devices, as with any messenger.

7. Third-Party Services

Pravida does not integrate with any third-party analytics, advertising, crash reporting, or tracking services. There are no SDKs, no beacons, no pixel tracking. The only third party involved is Apple, whose iCloud, push and on-device frameworks the app is built on.

8. Purchase and Payment

App Store purchases, if any, are processed entirely by Apple; we do not receive or store any payment information.

9. Support Communications

If you contact us at [email protected], we receive only the information you choose to include in your email. We use it solely to respond and do not share it with any third party.

10. Children's Privacy

Pravida is not directed at children under 13, and we do not knowingly collect any information from children. Since we collect no information from anyone, there is nothing to request or delete on a child's behalf; a parent can remove the app from a device at any time.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the app after changes constitutes acceptance.

12. Contact

Questions about this policy? Contact us at [email protected].