Privacy

Portus is a local-first SMS app. Your message content lives on your device and only leaves it when you back it up to a cloud destination you control.

What Portus does NOT collect

• Analytics or telemetry of any kind.
• Advertising IDs, device fingerprints, IP addresses.
• Your identity, contacts, or any account information — Portus doesn't require an account, and there is no orezeno-controlled server that could receive one.
• Message content — see below.

Message content (SMS and MMS)

Android's system SMS/MMS provider is the authoritative store for your messages. Portus reads and writes there as your default SMS app, exactly the way any SMS app does. That content stays on your device.

Portus never sends your message content to any orezeno-controlled server, because none exists. There is no Portus cloud, no Portus backend, and no analytics endpoint that could quietly receive message data.

Cloud backup destinations

Portus can back up your messages to a destination you control — a WebDAV server you run or subscribe to, or a local folder on your device. A paid Pro tier will add Google Drive, Dropbox, and OneDrive as additional destinations; the same "your account, your data" principle applies to those. Backup is opt-in. If you don't turn it on, no message content leaves your device via Portus at all.

Backup files are yours. You can open them, inspect them, delete them, or move them off the destination at any time using the destination's normal tools. They are not encrypted at rest in v1 (client-side encryption with a user passphrase is planned for v1.5); protect them the way you protect any personal data on your cloud storage.

What INTERNET is used for

Portus holds the Android INTERNET permission because a few features genuinely need network access. Everything network-facing is enumerated here so you can verify it maps to a feature you asked for:

• MMS carrier transport. Sending and receiving MMS uses Android's SmsManager, which talks to your mobile carrier's MMSC. This is how MMS works on any Android; nothing about it involves orezeno.
• Map tile fetch. When a message contains a location URL, Portus draws a small preview thumbnail by fetching a single map tile from OpenStreetMap. The request contains only the tile coordinates — not the message text and not any identifier.
• Cloud backup upload. When (and only when) you have enabled backup, Portus uploads backup files to your chosen destination — WebDAV to the server you configured, or (once Pro is available) Google Drive, Dropbox, or OneDrive via each provider's official OAuth flow. Traffic goes directly from your device to your destination; it does not pass through anything orezeno-operated.
• Google Play Billing. Once the paid Pro tier is available, purchase verification will go through Google Play Billing (Google's system, not ours). Purchase state is stored on-device and validated with Google Play; no purchase data is sent to any orezeno-controlled server.

Your message content is never transmitted to any orezeno-controlled server, because none exists.

Contacts

The READ_CONTACTS permission is optional. Portus works fine without it (you'll see phone numbers instead of names in the conversation list). If you grant it, contact names are used only to render friendly names next to phone numbers on-device. Contact data is not backed up, uploaded, or shared.

Location

The ACCESS_FINE_LOCATION permission is optional and only prompted when you tap "attach location" in the composer. If you grant it, Portus fetches a fresh GPS fix, formats it as an OpenStreetMap URL, and inserts that URL into the message you're composing. Location data is not otherwise stored, tracked, or shared.

Photos and other attachments

Photos and files you attach to a message are picked through Android's system Photo Picker or file picker. Only what you explicitly attach ever leaves your device — via MMS to the recipient you selected, or bundled into a backup file if backup is enabled.

Report an issue

The "Report an issue" button in Settings gathers the app's recent log lines and device information (app version, device model, Android version) into a text file, then hands that file to your email app of choice with the support address (portus@orezeno.app) pre-filled. Nothing is sent until you tap Send in your email app; the log file is plain text so you can review it before sending. Message content is not included.

Google Play Services

The Google Play Store may collect data about your Portus installation and usage patterns — installs, uninstalls, aggregate crash and ANR reports, and so on — as part of how the Play Store works. That data collection is Google's, governed by Google's privacy policy, and applies to every app you install from the Play Store; it is not something Portus opts into or controls.

Children

Portus is a general-audience communication app and is not directed at children under 13. If you are a parent or guardian and believe a child under 13 has been using Portus on a device you control, no action from us is required (there is no account to close and no data on our servers to delete), but the child can uninstall the app the same way any Android app is uninstalled.

Changes to this policy

This policy will be updated in place if the app's behavior changes. The "Last updated" date at the bottom reflects the most recent revision. Substantive changes will also be noted in the app's release notes on Google Play.

Contact

Questions about this policy: portus@orezeno.app.

Last updated: 2026-08-20