Official Privacy Policy

Ciphera
Ciphera Privacy Policy

Zero identity registration. End-to-end encrypted messaging. No phone number, no email, no cloud logs.

Closed TestingZero-identityAES-256-GCMX25519RAM-only relays

Effective Date: October 2026 · Mumline Independent Studio

01Core Philosophy: Zero-Knowledge

Ciphera is engineered around the principle that your private conversations are yours alone. We do not want your personal information, we do not record your communications, and our systems are architected so that we mathematically cannot access your messages even if requested.

No account creation or personal profiles
No phone number or contact sync required
RAM-only message transmission
Zero database storage of plaintext

02No Personal Information Collected

We do not collect, request, or store any of the following:

  • Your name, email address, physical address, or phone number.
  • Your device phonebook, contact list, or call logs.
  • Your precise or coarse geographic location.
  • Your hardware advertising ID (GAID), IMEI, or SIM card identifiers.
  • Any biometric authentication data.

You may install Ciphera, generate your cryptographic key pair locally on your hardware, and communicate without ever providing identifying data.

03End-to-End Cryptography Architecture

Every message, image, voice snippet, and file transmitted through Ciphera is end-to-end encrypted before leaving your physical device.

  • Protocol: AES-256-GCM with authenticated elliptic-curve Diffie-Hellman (X25519) ephemeral key agreement.
  • Key Custody: Private encryption keys are generated on-device, stored exclusively inside your device's protected hardware keystore, and never leave your hardware.
  • Relay Architecture: Relay servers operate strictly in volatile RAM memory. When a message is relayed to an active recipient, it is purged from RAM instantly. We maintain zero message databases.
  • Voice & Video Calls: Direct peer-to-peer WebRTC connections established with end-to-end encryption. No audio or video data passes through intermediate storage.

04On-Device Storage and Data Ownership

All conversation history, media files, and cryptographic configurations reside strictly in sandboxed local storage on your device. Mumline maintains no cloud backup, synchronization server, or remote recovery mechanism. If you uninstall the application or clear its local storage, your stored messages are permanently eradicated.

05Device Permissions and Justifications

Ciphera requests only the bare minimum runtime permissions required to deliver real-time communication:

  • Camera: Required strictly when you initiate video calling or take a photo within a chat. No background capture is possible.
  • Microphone: Required strictly during active voice calls or when recording audio messages.
  • Storage / Media: Required solely to attach user-selected local files to conversations.
  • Notifications: Required to alert you to incoming peer transmissions via lightweight push wakeups.

06Third-Party Telemetry and Advertising

Ciphera contains zero third-party tracking SDKs. We do not integrate Google Analytics, Firebase Analytics, Facebook SDK, Adjust, AppsFlyer, or any commercial advertising networks. No analytics beacons or advertising trackers run inside the application.

07Google Play Distribution

Ciphera is distributed through the Google Play Store under Google Play Closed Testing policies. While Google Play services may process transaction and installation telemetry according to Google's standard Privacy Policy, the Ciphera binary code operates completely autonomously from Google data collection.

08Other Mumline Privacy Policies

Each Mumline tool adheres to the same uncompromising privacy standard. Read the detailed policies for Quiet Drop and Calculator Vault:

Everyday tools,
built for privacy

Free, zero-knowledge Android applications that respect your data. Currently in closed testing for Google Play Store.

Explore the apps