Your data stays with you

What we collect

Nothing. Reaper Mesh has no accounts and no developer servers. The apps contain no analytics, advertising or tracking code, and nothing you do in them is sent to us.

What stays on your device

Mobile apps. Messages, contacts, map items and encryption keys are kept on your phone in a single store encrypted with AES-256. The key to that store is held by the iOS Keychain or the Android Keystore. It is never backed up and never moves to another phone, so the data cannot be restored from a backup or read on a different device.

Web app. Messages, keys and settings are kept in your browser's storage for this site. You can lock them with a PIN. The site only delivers the app; it receives none of your data.

Your Reaper radio and the mesh

Reaper Mesh sends messages over LoRa radio between Reaper devices, not over the internet. What you send is received by radios in range. Channels can be encrypted with keys shared by QR code, and team networks rotate their keys on a schedule. Anyone who has a channel's key can read that channel's messages, and anyone who receives a message may keep it. Deleting something on your phone does not delete it from other people's devices or from your radio.

Permissions and what they are used for

Location

Used only on your phone, to show your position on the map and measure distances. It reaches your radio only if you save it in Position settings or choose This phone as the position source. Your radio then broadcasts it over the air unencrypted, even on encrypted channels. Anyone in range can receive it and may keep it.

Bluetooth

Used only to connect to your own Reaper radio. The app stays linked to it while it is in the background so messages keep arriving. Bluetooth is never used to work out your location.

Camera

Used only to scan channel and team QR codes. Nothing is recorded or stored.

Photos

The app adds a channel QR image to your photo library only when you choose to save one. It does not read your photos. Anyone who gets that image can join the channel.

Notifications

Notifications are created on your phone, with no push service. A setting chooses what they show: the sender only (the default), the full message text, or nothing.

Maps

Map tiles are downloaded from Esri's ArcGIS Online servers (server.arcgisonline.com). Like any web server, Esri receives your IP address and the map areas you view, and handles them under Esri's own privacy policy. We do not receive this information. Tiles you have viewed are cached on your phone, up to 512 MB, so the map works offline for those areas. The cache is kept outside the encrypted store but under your phone's normal data protection, and it holds no messages or positions from the mesh.

This website

reapermesh.com is a static site hosted on GitHub Pages. Like any web server, GitHub receives your IP address and the pages you request, and handles them under the GitHub Privacy Statement. The site sets no cookies and contains no analytics, advertising or tracking code, and we do not receive this information.

Deleting your data

Erase in the app's settings deletes all of the app's data on your phone, including the map cache. Uninstalling the app also removes it. In the web app, wiping local data does the same for that browser. This cannot remove messages already received by other radios or phones.

Children

Reaper Mesh is not directed at children, and we do not knowingly collect information from anyone, including children.

Changes to this policy

If this policy changes, the new version will be posted on this page with a new effective date.

Contact

Questions about privacy: support@reapermesh.com.