Welcome to VeilMesh, a service provided by Bison Tech Solutions Inc. (“we,” “us,” or “our”). We are committed to protecting your privacy and ensuring a secure, offline-capable communication experience. This Privacy Policy explains what permissions the app requests, what metadata is processed, and how data retention works on our public relay and isolated B2B contours.

1. Device Permissions and How We Use Them

VeilMesh does not require a phone number, SIM card, or email address to create an account. To provide our mesh networking, calling, and messaging features, the app requests only the permissions necessary for those features:

Bluetooth & Local Network: Used exclusively to discover nearby peers, exchange encrypted text/group packets and prekeys over Bluetooth LE, transfer files over local Wi-Fi (a shared network, a hotspot, or AWDL between Apple devices), and pair with the Mirror Phone desktop companion.
Camera: Used for scanning Veil ID and contour QR codes, taking photos to send in encrypted chats, and participating in video calls.
Microphone: Used to record encrypted voice messages and participate in end-to-end encrypted audio/video calls.
Photo Library & Files: Allows you to select media or documents to encrypt and share with your contacts.
Push Notifications (APNs & FCM): Online, we use Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM) with blinded notification tags (SERVER-132) to wake your device for incoming messages and calls.

2. Metadata, Third-Party Services, and Data Retention

We do not sell your personal data or monetize user traffic. Our systems are engineered to minimize server-side data:

App Attestation & Push Delivery: On the public relay, we use Firebase App Check (DeviceCheck / Play Integrity) and APNs/FCM to prevent automated spam and wake backgrounded mobile devices.
Metadata Minimization: Group chat names are never sent to the relay server (they travel only inside the end-to-end encrypted MLS Welcome package). Typing indicators are sealed (typing_sealed.1), read receipts are end-to-end encrypted, and Locked Chats strip attachment filenames before upload. Until full Sealed Sender is enabled, authenticated relay connections see sender and recipient Veil IDs, connection timestamps/IPs, and—in unlocked chats—sender display names and attachment filenames. See our Security Status page for full details.
Relay Data Retention: Because all private chats are End-to-End Encrypted (E2EE), the relay cannot read message contents. With RELAY_HISTORY_OFF (supported from client v1.96), encrypted messages are deleted immediately upon delivery. If a recipient is offline, encrypted packets are held in the offline delivery queue for 7 days by default (configurable between 1 and 30 days) and then automatically deleted. Moderation abuse reports submitted by users are retained for up to 90 days.
Mirror Phone Zero-Disk Policy: When using the veilmesh-desktop companion in Mirror Phone mode, zero account keys and zero chat history are written to the computer's disk; all mirrored state exists only in RAM and is wiped immediately on disconnect or screen lock.
Isolated B2B Contours (VeilMesh Box & BYOC): When your organization or vessel uses an isolated VeilMesh Box or BYOC server, your organisation acts as the data controller of that contour.

3. Children’s Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children. If we become aware that we have collected such data, we will take steps to delete it immediately in compliance with COPPA and GDPR regulations.

4. Public Channels and User-Generated Content (UGC)

VeilMesh includes optional public broadcast channels, and we enforce Apple App Store and Google Play guidelines regarding User-Generated Content on public infrastructure.

Zero Tolerance Policy

We have a zero-tolerance policy for objectionable content, CSAM, abusive behavior, and harassment. Any user found sharing illegal or abusive material on public infrastructure will be banned from the public VeilMesh relay.

Blocking Users & Duress Wipe

You have full control over who can communicate with you. You can block any Veil ID directly from the chat view, lock sensitive conversations behind an Argon2id PIN, or configure a Duress PIN that cryptographically wipes local keys and chat history on the device.

Reporting Objectionable Content

If you encounter abusive users or inappropriate public channel content, you can report the user or message via the in-app reporting feature. We review reports within 24 hours.

5. End-to-End Encryption (E2EE) & Post-Quantum Companion Link

Your private conversations—including 1-on-1 messages (X3DH + Double Ratchet), group chats (MLS RFC 9420), file attachments (AES-256-GCM STREAM), and voice/video calls—are secured using End-to-End Encryption. Connections between your phone and the Mirror Phone desktop companion are additionally protected by a hybrid post-quantum key encapsulation mechanism (X25519 + ML-KEM-768).

6. Account Deletion

You can delete your account at any time directly from within the VeilMesh app settings. Upon deletion, your local SQLCipher database and Keychain/Keystore keys are wiped, and queued server-side data associated with your Veil ID on the relay is permanently removed.

Contact Information

Bison Tech Solutions Inc.
71 Raymond Rd, West Hartford, CT 06107, USA
Phone: +1 (860) 503-2436
Email: support [at] veilmesh.com