Privacy Policy

Last updated: October 20, 2026

This policy explains how Mist DM ("the service") handles information. Mist DM is an iPhone messaging app. We do not show ads or track you across other apps.

Who operates the service

Mist DM is operated by its publisher. Contact us at support@mistdm.com.

No account, by design

There is no account sign-up. We do not ask for a phone number, email address, legal name, address book, or location. You only choose a display name and an icon for the people you connect with.

Information we do not collect

Phone number, email address, legal name, or date of birth
Your address book, bulk photo-library upload, or location
Advertising identifiers, or tracking by third-party ad or analytics SDKs
Payment card numbers (purchases are processed by Apple)

Information stored on your iPhone

Your display name and profile icon
The people you are connected with
Message text and photos until you end the conversation or delete the app (inactivity never deletes them)
Keys used for encrypted messaging
Your app lock setting and a scrambled form of your pattern (the pattern itself is never stored). Face ID and Touch ID data never reach the app or leave your device

This stays on your iPhone. The app database is excluded from iCloud and computer backups. When a conversation ends, its messages are deleted from both phones.

Information that reaches our servers

Device identifier: a random device id created by the app, plus a secret used for authentication. This is not an advertising ID.
Display name and icon: stored so the people you are connected with can see them.
Encrypted messages and photos: encrypted on your phone before they are sent. We cannot read them. If the other person is offline, the encrypted data may be held for up to 24 hours and is deleted once delivered. It is also deleted when the conversation ends.
Connections and invites: invite tokens and mutual-approval state needed to deliver messages.
Push and incoming-call tokens: we store the tokens Apple issues for notifications and for incoming calls (VoIP). Neither push includes message text or names; an incoming-call push carries only a random ID for the call.
Call signaling: signals used to start a voice call. Call audio is not stored on our servers. Audio goes directly between phones when possible; when a direct path isn't available, it is relayed through a TURN server. Audio is encrypted.
Technical logs: short-lived connection logs for reliability. They do not include message bodies.

How we use information

To deliver messages, photos, and calls
To create and approve connections
To prevent abuse and fix outages
To answer support requests

We do not sell data, show ads, or build advertising profiles.

Sharing with others

Apple: App Store distribution and in-app purchases, under Apple's terms.
Cloudflare: hosting for the API and this website. They carry encrypted traffic as infrastructure. We do not read message bodies.
Call connection helpers (STUN / TURN): Google (STUN) and Metered's Open Relay (STUN / TURN). When a call connects, these providers can see your IP address. Call audio is encrypted, so they cannot hear it.

We do not sell information or share it for advertising. We may disclose information if required by law.

How long we keep it

Offline ciphertext: up to 24 hours, or until delivery or conversation end, whichever is sooner
Display name, icon, and connections: until you delete them or remove the connection
Message bodies on the phone: until you end the conversation or delete the app

Your choices

Change your display name and icon in the app
Reject or remove a connection
Block someone who bothers you (their requests are declined automatically; the block list is stored only on your iPhone)
Report a person from "Report / Block" in the app (this opens an email to support; messages are encrypted, so their contents are not included)
End a conversation to delete its messages on both phones
Deleting the app removes conversations and other data on the phone, but this device's ID (the encryption keys) stays on the device, so your connections come back when you reinstall. To erase everything, use "Delete this device's ID" in the app's settings: it deletes the data on the phone and the records on our servers, and removes you from your contacts' lists
Ask us to delete server-side records by writing to support@mistdm.com

Children

The service is not directed to children under 13. If we learn we hold information from a child under 13, we will delete it.

International processing

Servers run on Cloudflare, so processing may occur outside your country. Message bodies that leave the phone are encrypted and are not readable by the operator.

Changes

If we change this policy, we will update this page and the "Last updated" date. For material changes, we will provide a reasonable notice.

Contact

support@mistdm.com