How your data is handled

PuriCloud is run by PuriFone. It carries your phone’s messages to a computer, keeps backups of your phone, and, when you choose, keeps your contacts and calendar in step with your phones and your Google account. This notice covers the PuriCloud website, PuriCloud itself, and the Puri apps on your phone where they use PuriCloud. Questions about it: PuriFone, through the shop you got your phone from.

Your messages: end-to-end encrypted

Texts, MMS pictures and files, contact names and numbers, conversation names and previews, contact photos, drafts, quick texts and smart replies are locked on your phone with a key the server never has. Only your phone and the browsers you connect to it can open them. The server stores them locked and cannot read them, and neither can anyone who runs it or copies its database.

Your backups: encrypted on the phone

PuriCloud backups are by invitation for now. Each backup is encrypted on the phone with your backup password before it is sent. PuriCloud stores it and cannot open it. Only the backup password or its recovery code can, and PuriCloud has neither.

Your account details

For an online account: your email address, name, mobile number and postal address, so the account can be identified and managed. You can change them under My account. For a backup account on the phone: the phone number and a PuriCloud password. The server’s administrator can see account details. Passwords are stored only as one-way hashes.

What else the server sees

The names you give your devices, your SIM labels, and for each message only its time, whether it was sent or received, SMS or MMS, which SIM, its delivery status and its locked size. For backups, each backup’s date and size. The server keeps a log of requests (address, time, page) without any message content, which it rotates, and a security record of sign-ins, failed sign-ins and administrator actions with the address they came from, which it keeps.

Google contacts and calendar

This is a feature you switch on yourself, on the website, under My account › Google. It is being built and is not yet available to everyone.

What PuriCloud reads from Google

Only what you switch on: your Google contacts, and the events of the Google calendars you pick, with the list of your calendars so you can pick them. PuriCloud asks Google only for those, and for nothing else in your Google account (not your email, files or other contacts lists).

What it is used for

Only to keep the same contacts and events on your Google account, in PuriCloud and on your Puri phones, in both directions: a contact you edit on the phone changes in Google, and one you add in Google appears on the phone. It is used for nothing else.

The one thing that is different

To keep two sides in step, the server must be able to read and merge them. So unlike your messages and backups, synced contacts and calendar events are not end-to-end encrypted: the server can read them. They are encrypted when stored, under a key for your account kept apart from the database. They never appear in logs or on any administrator’s page.

Who it is shared with

Nobody. It goes only between your Google account, PuriCloud and your own phones.

How long it is kept, and how to remove it

While the link is on. Earlier versions of a contact or event are kept 30 days so a bad change can be undone, and a deleted item is remembered 90 days so offline phones learn of it. Disconnect Google under My account › Google: PuriCloud withdraws its access at Google and deletes it, and offers to delete the synced copies too. You can also withdraw access from your Google account’s security settings at any time. Deleting your PuriCloud account deletes all of it.

Google’s rules

PuriCloud’s use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements. Data from Google is never used for advertising, never sold, never used to train AI models, and never read by a person, except with your consent, when needed for security, or when the law requires it.

The Puri apps on your phone

Messages reads and sends your texts and reads your contacts, as your phone’s messaging app. PuriBackup reads the Puri apps’ own data to back it up. This stays on the phone, unless you connect Messages to a browser or turn on PuriCloud backups, as described above. The apps show no advertising.

This website

These public pages set no cookies, run no scripts and load nothing from any other site. Logging in happens only at My account, which uses a cookie only to keep you logged in.

Email

Your email address gets sign-up and password-reset codes, and notices about your account’s security, nothing else.

Who else handles it

A hosting company runs the server PuriCloud lives on. An email service delivers sign-up, reset and security emails, so it sees your address and the email. If you turn on notifications in Messages, your browser maker’s notification service carries an empty wake-up signal, with nothing in it. None of them can read your messages or open your backups, and none may use what they handle for anything else.

How it is protected

Every connection is encrypted (HTTPS). Messages and backups are end-to-end encrypted as above. Sign-in can use a passkey or a second step. Administrators must use a passkey, and their actions are recorded.

Deleting your data

Disconnecting your phone from Messages deletes everything it synced from the server. Deleting a backup removes it from your account at once; its encrypted file, which PuriCloud could never open, is removed from the server later. To delete your online account and everything with it, write to PuriFone, through the shop you got your phone from from the account’s email address. To delete a backup account (a phone number), write to PuriFone, through the shop you got your phone from with the number, and we confirm it is yours before deleting. Your phone keeps all its own messages either way.

The server keeps its own copies of its database, for recovery, and an encrypted copy of the backups away from the server in case it is lost. These copies are kept for up to 35 days. Something you delete, or an older backup replaced by newer ones, leaves them within 35 days.

Changes

If this notice changes, the new version is posted here with its date first. A change to what is done with Google data is made here before it takes effect.