Meen — Privacy Policy

Last updated: 2026

Important — content moderation: Meen is an anonymous service, but it is not end-to-end encrypted. To keep the community safe, our administrators can review messages, room contents, and Whisper conversations when investigating reports of abuse, harassment, threats, sexual content involving minors, incitement to violence, or other illegal activity. Do not use Meen to send anything you would not want a moderator to read. By using the app you accept that messages may be reviewed for safety reasons.

Meen is an anonymous, ephemeral chat app. We collect the minimum information needed to deliver messages between users and run the service. We do not sell or share your data with advertisers.

1. Data we collect

Anonymous account identifier (UID) — generated by the server when you first open the app. Not linked to your name, email, or phone.
Display handle (the name you type) and avatar seed — chosen by you, visible to people in rooms you join.
Messages — text and images you send to rooms. Stored on our server so other room members can read them.
Device push token — provided by Firebase Cloud Messaging so we can notify you of new messages when the app is closed.
Device identifier — a device ID (Android SSAID) used only for security: to enforce bans so a removed user cannot immediately re-register. We store it only as a salted, one-way hash — never the raw value — and it is not linked to your name or identity.
Crash diagnostics — if the app crashes, Firebase Crashlytics records the error (stack trace, device model, OS version, and your anonymous UID) so we can fix bugs. No message content is included.
Technical logs — IP address and request metadata, kept for 30 days, used to operate and secure the service.

2. Data we do not collect

No email, phone, real name, address, contacts, location, or advertising ID.
No advertising SDKs and no behavioral/usage analytics. We use Firebase Crashlytics solely for crash diagnostics (see above).

3. How we use data

To deliver messages between users in chat rooms and Whisper threads.
To send push notifications via Google Firebase Cloud Messaging.
To prevent abuse and keep the service running.
To moderate content. Administrators may review messages, rooms, and Whisper conversations when responding to a user report or investigating suspected violations (violence, harassment, sexual content involving minors, illegal activity, spam). Reviewed content is never sold or shared with advertisers.

3a. Content monitoring & safety

Because Meen is anonymous, abuse is harder to trace. To keep users safe we maintain a small moderation capability:

Any user can report a message with the flag (🚩) action; reports are sent to administrators.
Administrators can read the reported message, the surrounding conversation, and the sender's other recent activity strictly for the purpose of deciding on action (warning, message removal, account ban).
Whisper («همسة») threads are stored on our servers and can be reviewed by moderators when reported. They are not end-to-end encrypted.
On-device image check. Images you attach are checked on your own device before upload. Clearly explicit images are blocked and never leave your phone; borderline images may be uploaded and flagged for moderator review. This check runs locally — the picture is not sent anywhere for scanning.
We do not perform automated bulk reading of conversations. Moderation review is reactive (driven by reports) and limited to what is necessary.
Severe violations involving illegal content may be reported to the appropriate authorities together with the account UID and any relevant message contents.

4. Sharing

We share data only with the infrastructure providers that operate the service:

Google Firebase Cloud Messaging — receives your device token and message previews in order to deliver push notifications.
Our hosting provider — runs the servers that store and route messages.

We do not sell data and do not share it with advertisers.

5. Retention & deletion

Messages remain in a room until the room is deleted or the user account is deleted.
You can delete your account from the app; this removes your UID, handle, device tokens, and messages you authored.
If your device has been banned, the salted device-hash may be retained for the duration of the ban (or permanently for a permanent ban) so the ban can be enforced. It contains no personal information.
Server logs are retained for up to 30 days.

6. Children

Meen is not directed to children under 13. If you believe a child has provided data, contact us and we will remove it.

7. Your rights

You can request access to, correction of, or deletion of your data by contacting us at the address below. Account deletion is also available in-app.

8. Security

All traffic uses HTTPS/TLS. Messages are stored encrypted at rest on our infrastructure. We do not currently offer end-to-end encryption.

9. Changes

We may update this policy. The new version will be posted at this URL with an updated date.

10. Contact

Questions or deletion requests: anas99anas@gmail.com