Privacy policy

Last updated: 29 May 2026

Who we are

Mia Relay (“we”, “us”) is a verified-only communications service operated under the Mia Bazo umbrella. Contact: info@miabazo.com.

What we collect

  • Account data — email, password (hashed), display name, optional profile photo, bio, headline, company, location, website.
  • Conversation content — the text messages and image attachments you exchange. v1 stores these on our servers so they can be delivered to your other devices and to other conversation members. Private direct messages will move to end-to-end encryption in a future release; open rooms remain server-readable by design for moderation.
  • Call signalling — we record who called whom, when, for how long, and whether a recording was made. We do not record call audio or video unless a participant explicitly starts a recording (everyone sees a banner when this happens).
  • Presence — whether you are currently signed in and your last-seen timestamp, used to populate the “online” indicator visible to people you share conversations with.
  • Personalization — per-contact aliases, default ringtone, uploaded custom ringtones. These are private to your account.
  • Payment metadata — if you pay for a verified introduction, we store the Stripe payment intent identifier and a record of the transaction outcome (escrow held, settled, refunded). We never see or store your card number.
  • Technical data — IP address, device type, operating system version, app version, and authentication tokens. Standard for any web/mobile service.

How we use it

  • To run the service: deliver messages, route calls, render the chat, render your profile.
  • To prevent spam and abuse: the verified-account + paid-introduction model is the product. We log enough to enforce it.
  • To provide account security: rate-limit logins, refresh sessions, detect unusual sign-in patterns.
  • To respond to your support requests.

We do not sell your data. We do not show you ads.

Who we share it with

  • LiveKit — processes real-time voice and video media for calls. Media is not stored by LiveKit after a call ends unless you start a recording.
  • SendGrid — sends transactional email (password resets, intro notifications). Your email address is shared with SendGrid for that purpose only.
  • Stripe — processes payments for verified introductions. Card data is collected directly by Stripe; we never receive it.
  • Microsoft Azure — hosts the application, the SQL database, and the private blob storage for your photos and ringtones.
  • Stripe Identity (when enabled) — performs identity verification at your request to grant your account the verified badge.

We do not share your data with marketers, data brokers, or advertising networks.

Retention

Account data and messages are retained for as long as your account exists. Deleting your account removes your profile, your sent messages, and your uploaded photos within 30 days. Messages you sent that other people received cannot be remotely deleted from their devices.

Your rights

You can edit your profile and upload/replace your photo from the app at any time. To export or delete your data outside the app, email info@miabazo.com and we will respond within 30 days. If you are in the UK or EU, you have rights under UK GDPR / GDPR (access, correction, erasure, portability, restriction, objection); we are happy to honour them.

Children

Mia Relay is not directed at children under 13 (or 16 in some EU jurisdictions). If you believe a child has given us personal data, please contact us so we can delete it.

Changes

We will update the “Last updated” date above when we change this policy and, for material changes, notify you in-app or by email at least 30 days before they take effect.