Privacy Policy

1. Who we are

Connect Me is run by ADORASOFT, a partnership firm registered in Lahore, Pakistan (“we”, “us”). This policy explains what the app and our servers collect, and why; who else handles it; how long we keep it; and what you can do about it.

For anything about your privacy, write to connectme@adorasoft.net, or use Me → Help & Feedback → Support in the app.

2. The short version

The full policy is below, and it is the one that counts. The cards above say the same thing in plain words.

3. What we collect, and why

We collect what we need to run a calling and messaging service and to keep it safe. When ads are shown, we also collect what our ad partner needs to show them (section 7).

• Your account: your phone number, so people can reach you and we know it is you; the name and profile photo you choose (we keep the photo you picked and the cropped copy); and your settings.
• Signing in: your number, and the codes we send you by SMS. We keep a code only as a one-way code, never the digits, and a record of each sign-in, so we can check it is you and stop abuse.
• Your contacts: once you allow Contacts, the app sends us the name and phone number of each entry in your address book - including people who do not use Connect Me - and sends them again when they change. We use them to show which of your contacts are on Connect Me, and to show names as you saved them, including in your notifications. See section 5.
• Messages and what you share: the text, photos, videos, voice notes, files, locations and reactions you send. We keep them so we can deliver them and keep your chat history. Messages are stored on our servers and are not end-to-end encrypted. Our systems process them to deliver them, and to search your chats when you ask; when a message contains a link, our server opens it to build a preview. People at Connect Me do not read your messages, except a message someone reports to us (see “Reports”).
• Status updates: the photos, videos and text you post, who viewed them, and replies to them.
• Calls: a record that a call happened - who, when, how long, and the minutes used. That is how minutes are counted. The call itself: see section 4.
• How well calls run: during a call, and when it ends, the app sends us numbers about the connection - its type (direct or through our relay), delay, lost sound, the codecs used, and how long the call spent reconnecting after the connection dropped. We use them to find and fix bad calls. They never include what was said, or anyone's IP address. The detailed readings are deleted after 30 days.
• Being online: when you are online, and when you were last seen (you can hide “last seen” in Me → Privacy); and typing and read indicators.
• Your phone and the app: your phone's model, system version and app version, each time the app starts and after each sign-in, to support you and fix what breaks; a notification token, so we can deliver notifications; and an identifier of your phone (the Android ID, or Apple's identifier for vendor), kept only as a one-way code to stop one phone claiming invite rewards many times.
• Your network address: our servers see your IP address whenever the app connects. We use it to limit sign-in attempts and to stop invite abuse. It is kept in limits that expire within an hour, in our server logs, and with invite sign-ups and number changes; for abuse checks we store it only as a one-way code. When you ask for a sign-in code or sign in, we also keep, for 90 days, the country and the company that runs the network your address belongs to, with a one-way code of the address - never the address itself - so our support team can spot a sign-in that was not you.
• Purchases: which pack or top-up you bought, when, and the store's reference for it. Apple or Google takes the payment; we never see your card.
• Support: what you write to us, and any attachment; and, unless you switch it off, the connection logs from the last 24 hours, which contain no message content.
• Reports: when you report a person, a group, a status update or a message, we keep the report and your reason. To review it, our staff see the reported message and the few messages around it.
• Invites: when someone joins with your invite code, we keep the code, the time, their IP address, and one-way codes of their phone and number, to credit rewards and to stop fraud. We never upload the numbers you invite - invites are sent from your own phone.
• Suspended accounts: while an account is suspended, messages sent to it are held on our servers, and delivered if the account is reinstated.
• Ratings: when you rate a call or the app, the stars, the problems or topics you tick and any comment you write, with the call's details we already hold (its length, its route, whether it had to reconnect), your network type (Wi-Fi or mobile data), your app version and phone model. We use them to find and fix problems. The other person on the call never sees your rating.
• Chats you share with support: if you share messages from a chat on your support ticket, we keep copies of exactly the messages you chose, and their media, on the ticket - nothing else from that chat. They are deleted 30 days after the ticket is closed.

4. What we never see

• What you say on a call. Calls run directly between the phones, encrypted on the way, and pass through our relay only when a direct route is not possible. We do not record them, and we cannot listen in. In a direct call the two phones connect to each other, so each can see the other's network address.
• Your SIM, call log or text messages.
• Where you are, unless you send your location in a chat. Then we see only the point you sent.
• Your card details.

5. Your contacts

• Contact matching starts once you allow Contacts. After that, the app keeps your list up to date by sending changes when you open it.
• Names and numbers are kept on our servers. They are used only to match your contacts and to show your own list and your notifications.
• They are never shared with anyone, including the people in your list.
• To stop the sync, turn off Contact sync in Me → Privacy. That also deletes what we hold.

6. Notifications

• Apple and Google deliver our notifications. A message notification carries the sender's name as you saved it (or their number), and the first 100 characters of the message. A call notification carries the caller's name.
• Each phone gets a notification token from Apple or Google. We store it with your account, and delete it when you sign out.

7. Ads

Connect Me shows ads from Google AdMob, to keep calling free. Whether you see them depends on your pack.

When ads are shown, Google's ad software in the app collects:

• your IP address, which can estimate your general area;
• your phone's advertising identifier, where your settings allow it;
• the ads you see and tap;
• data about how the app is running.

Google uses this to show, limit and measure ads and to prevent fraud, under Google's own privacy policy (https://policies.google.com/privacy).

Rewarded ads: when you watch an ad for free minutes, we give Google your Connect Me account ID, so Google can confirm to us that you finished it.

• Your choices: Me → Ads & free minutes → Ad privacy choices.
• On iPhone, ads are personalised only if you allow tracking when asked. You can change that in Settings → Privacy & Security → Tracking.
• On Android, you can reset or delete your advertising ID in your phone's settings.

8. Backups

• If you turn chat backup on, we keep copies of your chats and their media in our storage, so you can restore them on a new phone.
• The media copies are encrypted at rest.
• Backup is off until you turn it on. Deleting your backup removes the copy.

9. Who else handles your data

• Our hosting provider, which runs our servers - including the relay that calls use to find a route.
• Amazon Web Services (Ireland), which stores profile photos, backed-up media, status media, support attachments, and encrypted copies of our database.
• Apple and Google, which deliver notifications (section 6), take payment for packs, and confirm purchases to us.
• Google AdMob, for ads (section 7).
• OpenStreetMap: when you open the map to share a location, the map images come from OpenStreetMap, which sees your network address and the area shown.
• Twilio, our SMS provider, which sends your sign-in and account codes, so it receives your number and the text of the message.

Each of these providers handles the data only to provide its service, and must protect it at least as well as this policy does. Google's use of data for ads is covered by Google's privacy policy.

10. How we protect it

• Everything between the app and our servers is encrypted in transit.
• Only staff who need it for support and safety can see personal data, and every time they open a client's record, it is logged.
• Sign-in codes are kept only as one-way codes, so nobody - our staff included - can read one.
• Backed-up media, and every copy of our database, are encrypted at rest. The key that opens the database copies is not kept on our servers.
• Messages and contacts are not end-to-end encrypted. We protect them with access controls rather than promising that nobody could ever read them.

11. How long we keep things

While you use Connect Me:

• Status updates: 24 hours, then deleted with their media.
• Photos, videos and files you send with backup off: deleted from our servers 7 days after sending (for everything sent since 24 September 2026, when this began). The message itself stays in your history.
• A message you delete for everyone: removed from the chat at once, and from our servers. (A message our staff remove after a report is kept as evidence of the report.)
• Messages, call records, contacts, sign-in records, support tickets and reports: while your account exists.
• Records of sign-in requests, used for abuse checks: 7 days.
• Limits on sign-in attempts: up to an hour.
• Server logs: kept for a short time up to a fixed size, then overwritten.
• Invite records: 183 days.
• Copies of our database: up to about 40 days.

When you delete your account, these are deleted at once: your profile and your contacts; the messages you sent; your status updates; your backup; your purchase records; your support tickets and their attachments.

What we keep after deletion:

• the other person's copy of your one-to-one chats and calls: the text of messages you sent stays in their chat, shown as from “Deleted account”, with no name, photo or number. The photos, videos, voice notes and files you sent are deleted;
• an anonymous record that an account was deleted, with no number or name;
• records of what our staff did, which can include the name that was on your account;
• invite records, until their 183 days are up;
• copies in our database backups, until they cycle out about 40 days later.

12. Your choices and rights

In the app you can: see and change your profile; hide “last seen”; choose your notifications; change your ad privacy choices (and, on iPhone, tracking); turn Contact sync off; turn backup off, or delete it; switch off the logs sent with a support ticket; and export a chat from its menu.

To delete your account: in the app, Me → Delete my account; without the app, from https://calling.adorasoft.net/api/legal/delete-account.

Anything else, including withdrawing a consent you gave or asking what we hold about you: write to connectme@adorasoft.net.

13. Children

Connect Me is for people aged 16 and over. If we learn that an account belongs to someone younger, we close it.

14. Changes to this policy

When this policy changes, the new version appears here with the date it takes effect. We keep the previous version available for a year.