Skip to content

PRIVACY.md

Latest commit

 

History

History
117 lines (85 loc) · 5.99 KB

PRIVACY.md

File metadata and controls

117 lines (85 loc) · 5.99 KB

Privacy

Extera Next is available on Android and Linux.

Matrix

Extera Next uses the Matrix protocol. This means that Extera Next is just a client that can be connected to any compatible matrix server. The respective data protection agreement of the server selected by the user then applies.

For convenience, one or more servers are set as default that the Extera Next developers consider trustworthy. The developers of Extera Next do not guarantee their trustworthiness. Before the first communication, users are informed which server they are connecting to.

Extera Next communicates with:

  1. the selected server
  2. OpenStreetMap to display maps
  3. neurogate.extera.xyz for message translation. The content for translation may be passed to, but not limited to Groq, DeepInfra, OpenAI or Google (from most to least). For security reasons, translation function isn't available in encrypted rooms. Base URL for Extera's Neurogate service may be replaced through advanced config.

More information is available at: https://matrix.org

Database

Extera Next caches some data received from the server in a local sqflite database on the device of the user. On web indexedDB is used. Extera Next always tries to encrypt the database by using SQLCipher and stores the encryption key in the Secure Storage of the device.

More information is available at: https://pub.dev/packages/sqflite and https://pub.dev/packages/sqlcipher_flutter_libs

Encryption

All communication of substantive content between Extera Next and any server is done in secure way, using transport encryption to protect it.

Extera Next also uses End-To-End-Encryption by using libvodozemac and enables it by default for private chats.

App Permissions

The permissions are the same on Android and iOS but may differ in the name. This are the Android Permissions:

Internet Access

Extera Next needs to have internet access to communicate with services mentioned above.

Vibrate

Extera Next uses vibration for local notifications. More informations about this are at the used package: https://pub.dev/packages/flutter_local_notifications

Record Audio

Extera Next can send voice messages in a chat and therefore needs to have the permission to record audio.

Write External Storage

The user is able to save received files and therefore app needs this permission.

Read External Storage

The user is able to send files from the device's file system.

Location

Extera Next makes it possible to share the current location via the chat. When the user shares their location, Extera Next uses the device location service and sends the geo-data via Matrix.

Push Notifications

Extera Next uses the Firebase Cloud Messaging (FCM) service for push notifications on Android and iOS. This takes place in the following steps:

  1. The matrix server sends the push notification to the Extera Next Push Gateway
  2. The Extera Next Push Gateway forwards the message in a different format to Firebase Cloud Messaging
  3. Firebase Cloud Messaging waits until the user's device is online again
  4. The device receives the push notification from Firebase Cloud Messaging and displays it as a notification

The source code of the push gateway can be viewed here: https://gitlab.com/famedly/services/famedly-push-gateway

In case that FCM is unavailable, a UnifiedPush provider app installed on user's device will be used, including, but not limited to: Ntfy, Sunup.

event_id_only is used as the format for the push notification. A typical push notification therefore only contains:

  • Event ID
  • Room ID
  • Unread Count
  • Information about the device that is to receive the message

A typical push notification could look like this:

{
  "notification": {
    "event_id": "$3957tyerfgewrf384",
    "room_id": "!slw48wfj34rtnrf:example.com",
    "counts": {
      "unread": 2,
      "missed_calls": 1
    },
    "devices": [
      {
        "app_id": "chat.fluffy.Extera Next",
        "pushkey": "V2h5IG9uIGVhcnRoIGRpZCB5b3UgZGVjb2RlIHRoaXM/",
        "pushkey_ts": 12345678,
        "data": {},
        "tweaks": {
          "sound": "bing"
        }
      }
    ]
  }
}

Extera Next sets the event_id_only flag at the Matrix Server. This server is then responsible to send the correct data.

Explanation of Extera Next's Compliance with Google Play Store's Safety Standards

Extera Next is committed to promoting a safe and respectful environment for all users. As a Matrix client, Extera Next connects users to various Matrix servers.

To enhance user safety and help protect against the sexual abuse and exploitation of children, Extera Next enables users to report inappropriate content directly to server administrators.

Reporting Content or Users:

  1. Mark a message in the chat: Tap and hold the message you wish to report.
  2. Report the message: Select the "Report" option.
  3. Provide a reason and score: Enter the reason for reporting and assign a score from 1-100 to indicate how offensive the content is.
  4. Notification to admin: The server administrator will be notified of the reported content.

In addition to reporting messages, users can also report other users following a similar process.

We encourage server administrators to adhere to strict safety standards and provide mechanisms for addressing and moderating inappropriate content. For more information on the Matrix protocol and its safety standards, please refer to the following link: https://matrix.org/docs/older/moderation/