Privacy Policy

1. Core Privacy Principle

“We cannot produce, disclose, or recover what our systems do not retain.”

iDuno is built from the ground up on zero-knowledge cryptographic primitives. We do not require names, telephone numbers, device contacts, or passwords to use the service.

2. Conversation Content

All message payloads are encrypted end-to-end directly in your browser using AES-256-GCM. The encryption keys are generated locally via ECDH P-256 and never exit your device's memory. Our relay servers process opaque, unreadable byte packets that live solely in volatile RAM.

3. Data Retention Lifecycle

• Active Rooms: Retained in volatile RAM only for the duration selected (default 10 minutes, up to 24 hours).
• Expired Rooms: When the timer expires or a user triggers destruction, the BEAM process terminates and RAM buffers are immediately purged.
• Hard Disks: 0 bytes of conversation plaintext, ciphertext, or message metadata are written to solid-state or hard disk drives.

4. Pro Pass & Payment Information

Payments for Pro Burner Passes are handled directly by payment gateway processors (e.g., Stripe). iDuno does not collect, process, or store raw credit card numbers. Pro pass tokens are detached bearer tokens validated by cryptographic hash without linking to specific conversation rooms.

5. Third-Party Requests & Subpoenas

Because iDuno does not maintain conversation archives, user accounts, or persistent logs, the platform is mathematically incapable of reconstructing or producing past conversations in response to third-party or governmental demands.