Aoraton Chat
Privacy Policy Built to collect as little as possible.
We never sell your data or use it for advertising. Below is exactly what we store, who processes it, what changes when a room is bridged to radio, and what you can ask us to do.
At a glance
End-to-end encrypted
Message and attachment content is encrypted on your device with a key we never receive.
Anonymous by default
Chat anonymously and we store only a random anonymous ID. Google sign-in is optional.
Never sold
We never sell your data or use it for advertising.
Yours to delete
Ask us to access, correct, export or delete your personal data at any time.
A summary for convenience — the full policy below is what applies.
What we collect
Aoraton Chat is built to collect as little as possible. We never sell your data or use it for advertising.
- AccountIf you chat anonymously we store only a random anonymous ID. If you sign in with Google we store your Google account ID, email, name and profile picture, so we can save your rooms.
- Rooms & messagesRoom names, your membership and your messages (including attachments, voice notes, polls and shared locations) are stored on our servers so conversations work across devices. Message and attachment content is end-to-end encrypted: it is encrypted on your device with a key we never receive, so what we store is unreadable to us. Metadata — usernames, timestamps, room names, who is a member and when — is not hidden.
- NotificationsIf you enable them we store a push subscription and/or your choice to receive email alerts. Alerts never contain your message content.
- PaymentsPaid plans are handled by Stripe; we store your Stripe customer ID and current plan, never your card details.
- TechnicalStandard server logs needed to run and secure the service.
We rely on these processors:
- SupabaseHosting, database, file storage
- StripePayments
- GoogleOptional sign-in and the AI assistant
- Infrastructure providersMap tiles, avatar generation, call relay and email delivery
The LoRa mesh bridge
A room can be bridged to a Meshtastic LoRa mesh by a member who connects a radio to their browser. This changes where your messages go, so it is opt-in per room and the app asks you to accept exactly this before anything is transmitted:
- What goes on the airThe text of messages sent in the room while the bridge is on, plus the sender label the room is set to use (full name, a short prefix, or none). Files, voice notes and calls never cross — they have no form a radio can carry.
- It is not end-to-end encrypted there.On the mesh, content is protected only by the Meshtastic channel key — a shared secret with no sender authentication — and the default channel's key is published in every Meshtastic device in the world. Anyone in radio range with that key can read it, and we cannot control who is in range.
- MQTTA Meshtastic channel can be configured on the radio to uplink to an internet broker, and the common one feeds a public map. That setting belongs to the radio, not to us; the app reads it and warns you when it is on.
- What we storeMessages heard on the mesh are encrypted with the room key before they are saved, exactly like any other message. The radio's own readings about a message (signal strength, hops, whether it was confirmed) and the node names, positions and sensor values the mesh broadcasts are stored encrypted in the same way. Node positions can identify a place and a person — they are published by those radios, not by us, and they are visible to everyone in the room.
- Your radioThe Bluetooth pairing lives between your browser and your device. We never receive your channel keys.
Your data & your rights
You can ask us to access, correct, export or delete your personal data at any time by emailing info@aoraton.com. On request we delete your account, the rooms you own, your messages and your subscriber records. Rooms can also be set to auto-delete and messages to disappear on a timer — when a room is deleted, its messages and files are removed.
Contact
Questions, data requests and reports:
info@aoraton.comAlso read