PompoOS Privacy Policy

PompoOS does not collect, transmit, sell, or share personally identifiable information (PII) with Empoorio or any third party. Unlike traditional messaging platforms, PompoOS requires no phone number, no email address, and no external account authentication. All communications travel directly via encrypted LoRa radio packets between nodes or terminal devices.

• No centralized account: Your identity is an asymmetric cryptographic keypair generated solely on your local device.
• No trackers or advertisements: The application contains zero invasive telemetry SDKs, analytics, or behavioral trackers.
• Serverless architecture: There are no intermediate cloud servers holding chat logs, contacts, or metadata.

PompoOS requests only the Android permissions strictly necessary to communicate with radio hardware and exchange contact cards:

• Bluetooth (BLUETOOTH_SCAN, BLUETOOTH_CONNECT): Required to discover and connect via Bluetooth Low Energy (BLE) to your LoRa radio hardware node (such as Heltec WiFi LoRa 32 V3 or Meshtastic-compatible hardware). It is not used to track your geographical location.
• Location on Android 11 or lower (ACCESS_FINE_LOCATION): On legacy Android versions prior to Android 12, Bluetooth device scanning was tied by the operating system to location permission. PompoOS only uses this permission to detect the radio node on older Android versions and never logs or transmits your physical coordinates to any server.
• Camera (CAMERA): Used optionally and strictly upon explicit user demand solely to scan a public contact QR code. No image or video captured by the camera is ever saved or transmitted across the internet.
• Microphone & External Storage: PompoOS explicitly removes audio recording permissions (RECORD_AUDIO) and broad external storage access. All application data is stored in the local, sandboxed application directory protected by Android OS security.

The confidentiality and integrity of your messages are protected by modern cryptographic standards:

• X25519 public key encryption: Direct peer-to-peer messages are encrypted end-to-end on the sending device and can only be decrypted by the recipient device.
• Sovereign identity: Your digital identity is not linked to state identities or SIM cards. You can back up and restore it at any time using a standard 12-word mnemonic recovery phrase.
• Mesh network routing: Packets relayed by intermediate mesh nodes contain encrypted payloads; repeater nodes only process routing headers and radio telemetry (RSSI, hop count), without access to plaintext content.

All messages, cryptographic keys, and node configurations are stored strictly on your Android device's local memory using sandboxed, encrypted app storage. If you uninstall the application or wipe its data, all local conversation histories are permanently deleted unless restored with your 12-word recovery phrase.

PompoOS does not share any information with third parties, cloud infrastructure providers, or advertising networks. Because no central database exists, Empoorio Inc. has no technical ability to access, intercept, or disclose your private communications.

In accordance with the EU General Data Protection Regulation (GDPR) and international privacy laws, you maintain absolute sovereignty over your data:

• Right of erasure: You can delete individual chats, contacts, or regenerate your cryptographic identity at any time within app settings.
• Portability: You can export and transfer your sovereign identity to any compatible device using your 12-word mnemonic phrase.
• Data minimization: Because zero personal data is gathered on external servers, traditional remote database access requests are not applicable due to the absence of centralized records.

PompoOS does not solicit or collect personal information from children or users of any age. The application is a neutral off-grid radio communication utility.

We may update this policy to reflect application enhancements, new radio protocol capabilities, or regulatory updates in Google Play Console. Any revisions will be published on this official webpage with an updated revision date.

For questions regarding PompoOS privacy practices or the Empoorio ecosystem, contact our Data Protection Officer and compliance team at legal@empoorio.org.