Last updated: 3 October 2026
This policy explains what AMI Connect collects, why, and what you can do about it. It describes the app as it actually works today.
If you have questions, contact us at [email protected].
AMI Connect ("the app", "we") is a messaging and calling app. The data controller is AMI GLOBAL, Muscat, Sultanate of Oman.
Required to create an account. It identifies you, lets people who already have your number find you, and is how you sign in — we text you a code instead of using a password.
A display name, a username you choose, and optionally a profile photo and a short "about" line. These are visible to other people on AMI Connect.
Messages, photos, videos, voice notes, documents and other things you send are stored on our servers so they can be delivered to the people you send them to, and so they are still there when you reopen the app.
New chats are end-to-end encrypted by default. The keys stay on the devices of the people in the chat. We store only ciphertext we cannot read, so we cannot hand over the contents of those messages to anyone, including if we were legally compelled to try.
What we can still see for an encrypted chat is the metadata: that a message was sent, between whom, when, and its size. We cannot see what it said.
You can turn encryption off for new chats in Settings → Security. Some convenience features depend on the server being able to read a message, so in an encrypted chat: notifications say "New message" without a preview, you cannot reply directly from a notification, and the AI assistant cannot summarise the conversation or suggest replies. Chats created before this version, or with encryption turned off, are not end-to-end encrypted and their content is readable by us.
Calls are peer-to-peer where the network allows it. When a direct connection is not possible, call audio and video are relayed through Cloudflare's TURN servers to reach the other person. We record that a call happened, with whom, when, and how long it lasted. We do not record call audio or video.
In a newly created encrypted chat, the encryption key can take a moment to reach a device. If you send a text message before it arrives, that one message is sent without end-to-end encryption (it is still protected in transit by HTTPS) rather than not being sent at all.
When you edit a message, we keep its earlier versions so the people in the chat can see what changed; in an encrypted chat those earlier versions are stored encrypted, like the message itself.
If you grant contacts permission, the app reads the phone numbers in your address book on your device, normalises them, and sends them to our server only to check which of them already use AMI Connect.
people, or any other purpose.
Granting contacts permission is optional. The app works without it; you can find people by username instead.
Location is collected only when you deliberately share it in a chat, either as a one-off location or as live location. Live location is deleted automatically when it expires or when you stop sharing. We do not track your location in the background.
Used only when you take a photo, record a voice note, make a video or voice call, or choose a file to send. We do not access them at other times.
calls.
devices are signed in, and for the one-device-per-account rule.
SMS system.
containing no message content and identifying you only by account ID.
If you use the AI assistant, the text you send it — and only that text — is sent to our AI providers (Groq and Google Gemini) to generate a reply. Voice notes you ask to transcribe are sent for transcription.
Your ordinary conversations with other people are not sent to AI providers unless you explicitly ask the assistant to act on them. We keep only a count of assistant requests, to prevent abuse — not their contents.
GIFs and stickers come from GIPHY. When you search for one, the words you type are sent to GIPHY through our server, so GIPHY does not receive your IP address or account for the search. When a GIF or sticker is shown in a chat, your phone loads the image directly from GIPHY's servers, as it would for any image on the web.
We use these providers to run the service:
| Provider | What they handle |
|---|---|
| Supabase | Database, file storage, authentication |
| Dexatel | Sending your sign-in code by SMS |
| Expo | Delivering push notifications |
| Google Firebase | Delivering push notifications on Android |
| Cloudflare | Relaying call audio and video when a direct connection fails |
| Groq, Google Gemini | AI assistant replies and transcription, if you use it |
| GIPHY | GIF and sticker search terms, and serving the images, if you use them |
Your messages are of course visible to the people and groups you send them to. We may disclose data if we are legally required to.
International transfers. These providers operate servers outside the Sultanate of Oman, so running the service necessarily involves transferring your data abroad. We only use providers that commit to protecting it under their own terms and applicable data protection law.
you delete your account.
You can delete your account in the app: Settings → Account → Delete account.
This permanently deletes your profile, your messages, your media, your contacts list, your devices and your settings. Groups you own are handed to another member or deleted if you were the only one. This cannot be undone.
AMI GLOBAL is based in the Sultanate of Oman and processes personal data in accordance with Omani law, including the Personal Data Protection Law (Royal Decree 6/2022).
Wherever you live, you may ask us to:
app at any time,
contacts or location, by turning the permission off in Android settings.
You can do most of this in the app. For anything else, contact us at [email protected] and we will respond within 30 days.
If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your local data protection authority.
AMI Connect is not intended for children under 13 (or the minimum age in your country, if higher). We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.
Data is encrypted in transit (TLS) and at rest. Access is restricted by per-row database rules so that one account cannot read another's data, which we verify by testing the live service, not only by reading the code.
New chats are additionally end-to-end encrypted, so their contents are not readable by us at all. No system is perfectly secure, and metadata about encrypted chats — who, when, how much — is still visible to us.
If we change this policy we will update the date at the top and, for significant changes, tell you in the app.
AMI GLOBAL Muscat, Sultanate of Oman [email protected]