Privacy policy

Last updated: 27 October 2026

Senv is an end-to-end encrypted messenger. This policy explains what we collect, why, who else sees it, and what you can ask us to do. We wrote it to be read.

Who we are

Senv is provided by Paper Street Soap SRL (Italy), the data controller. Contact: lorenzo.demaio@pss.design.

The short version

• We cannot read your messages, voice notes, reactions, receipts or conversation topics. They are end-to-end encrypted on your device.
• We do not sell your data, show ads, or track you across other companies' apps and websites.
• We do not upload your contacts.
• The one exception to the first point is when you choose to chat with a remote agent, described below.

What we collect

• Phone number. You sign in with your phone number and a one-time code sent by SMS. The number is stored by our sign-in provider (Supabase) as your account identifier, and the SMS is sent through Twilio. It ties your account to your handle, so a new phone or a reinstall gets the same handle back and nobody else can take it. Our messaging server never receives your number. Other people never see it: they find you only by your handle.
• Handle and display name. The name you choose is stored in our directory so people can find and recognise you. Your handle is what other people see; your phone number is not.
• Account and session data. An internal account ID, your sign-in session, and a hash of a random messaging token your device creates, which links your devices to your account.
• Device keys. Public cryptographic keys for your device, so others can start encrypted chats with you. Private keys never leave your iPhone.
• Encrypted messages in transit. To deliver a message to a recipient who is offline, our server temporarily holds an encrypted envelope. It cannot read it, and it is deleted once the recipient's device acknowledges it, or after 30 days at most. Encrypted voice notes and other media are stored the same way (up to 30 days).
• Notification token. If you allow notifications, Apple's push token for your device, stored against your account and used only to wake the app to fetch new messages. Push payloads contain no message content.
• Technical logs. Our servers log requests (for example time, status and a shortened device identifier) for security and debugging. Logs never contain message content or full phone numbers.

What stays on your iPhone

Your conversations, contacts and keys are stored in an encrypted database on your device. The encryption key is kept in the iOS Keychain. Voice notes are transcribed on your iPhone using Apple's on-device speech recognition. Senv Assistant uses Apple's on-device model, so those conversations never leave your phone.

Chatting with a remote agent (optional)

If you start a chat with Senv Agent, what you type in that conversation, and what the agent sees while it works (for example web pages), is sent to our agent service and cannot be end-to-end encrypted, because the agent has to read it. It is processed by our infrastructure and by service providers we use to run it: an AI model provider and a cloud sandbox provider. Each agent conversation gets its own isolated workspace, which is deleted when you delete the conversation. Do not share secrets such as passwords with an agent. This is the only part of Senv where we, and those providers, can read what you send.

Who we share data with

• Supabase, which runs sign-in and stores account data (phone number, account ID, push token) and our database.
• Twilio, to send the SMS verification code.
• Amazon Web Services, which hosts our servers.
• Apple, to deliver push notifications.
• An AI model provider and a sandbox provider, only if you use Senv Agent.

We do not sell personal data. We may disclose data if the law requires it, but we can only hand over what we have: public keys, handle, display name, phone number and account ID, push token, and any encrypted envelopes not yet delivered.

How long we keep it

• Encrypted messages and media in transit: until delivered, 30 days at most.
• Phone number, account ID, handle, display name, device keys and push token: until you delete your account.
• Agent conversations: until you delete them.
• Server logs: kept for a short period for security and debugging.

Your choices and rights

You can ask us to access, correct, export or delete the personal data we hold about you, to restrict or object to its processing, and to withdraw consent where we rely on it. To delete your account and the data tied to your handle, email us from the address you can reach us at and tell us your handle. If you are in the EU or the UK you can also complain to your data protection authority (in Italy, the Garante per la protezione dei dati personali).

Legal basis (EU/UK)

We process your data to provide the service you asked for (contract), to keep it secure and prevent abuse (legitimate interests), and for optional features such as notifications and remote agents (your consent, which you can withdraw).

Children

Senv is not directed at children under 16, and we do not knowingly collect their data. If you think a child has signed up, tell us and we will delete the account.

International transfers

Our servers run on AWS in the European Union. Some providers (for example Supabase, Twilio and the agent providers) may process data outside the EU under standard contractual clauses or equivalent safeguards.

Changes

If we change this policy in a way that matters, we will update the date above and tell you in the app.