Arena values your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and what choices you have. Our general principle is to store as much data as necessary to provide the service.

1. Information We Collect and Store

Contact Sync

At regular intervals, Arena uploads a list of phone numbers from your Android or iOS Address Book to our servers.

We use this information only to return a list of matching Jabber IDs (either other Arena users or Jabber users who have entered their phone number in the Arena Directory).

Matches are stored locally on your device until you send a message to a contact. Sending a message adds that contact to your server-side contact list (Roster).

We do not store a copy of your entire address book on our servers.

If you register your Jabber ID in the Arena Directory:

Other Arena users cannot discover your phone number based on your Jabber ID.

Only users who already know your phone number can find your Jabber ID.

The Arena Directory can only be queried by registered users, and we implement measures to prevent bulk scraping.

Account Data

We store:

Your username (your phone number).

A hash of your password (never your actual password).

Account creation date.

Last login date (to help us delete inactive accounts automatically).

If you use the Arena Directory, we also store the combination of your Jabber ID and phone number.

Messages

Offline Messages: If someone sends you a message while you are offline, it will be stored until you come back online

Message Archive: By default, we keep an archive of your messages so you can retrieve them later (e.g., when logging in on a new device). You can opt out by changing your server-side archiving settings in your XMPP client.

Files

Any file you share with a contact or group is uploaded to our servers and stored until the recipient retrieves it.

Other Data

Your Jabber contact list (Roster/Buddylist). This is separate from your Android address book and maintained only by you.

2. What We Do Not Store

Your IP address or any data that could reveal your location.

A copy of your Android or IOS  address book.

3. How We Handle Your Data

If you delete your account, all related data (including messages, files, and contacts) will be permanently deleted from our servers.

We do not sell or share your personal data with third parties.

4. Your Choices

You may opt out of message archiving via your XMPP client.

You may delete your account at any time, which will remove all associated data.

5. Security

We use appropriate technical and organizational measures to protect your data from unauthorized access, loss, or misuse.

6. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at: support@smsone.co.ug