ISIISI is an invite-only messenger for friends and family. Accounts are a username and a password; we do not ask for your email address, phone number or contacts.
1. Your account
To join ISI you enter an invitation code, a display name, a username and a password. We store the username, the display name, an optional profile photo, an optional short bio, a password hash (never the password itself), the invitation you used and who issued it, and the time you last used the app. We do not collect an email address or phone number, and the app never uploads your device address book.
Because no email address is held, ISI cannot send password-reset messages. If you lose your password, an admin can invite you again under a new username; the old account can be deleted on request.
2. Messages, files and calls
The service stores the messages you send, the photos, files and voice notes you share, polls and your votes, reactions, edits, quoted replies, starred and archived state, mute settings, group photos, descriptions and invite links, shared locations (only when you choose to share one) and shared contact cards, delivery and read timestamps (per member in groups), your presence setting, group memberships and roles, call history (who called whom, when, and whether it was answered), and the people you have blocked or reported. When disappearing messages are on, messages are deleted from the server after the chosen period. This information is needed to deliver your conversations, show read receipts and unread counts, and handle abuse reports.
Content is only visible to the members of a conversation, enforced by server access controls. Traffic is encrypted in transit. Messages and files are not end-to-end encrypted: the service operator could technically access content stored on the server. Voice and video calls are relayed by our media server and are not recorded by the service.
Profile and group photos are stored under random, unguessable names and are readable by anyone who has the exact link; do not use a photo you would not want a member to save. Shared files are stored privately and served through short-lived links. Photos you share keep the metadata your device embeds in them.
3. Where information is kept
ISI runs on a server operated by Oppdrag AS in Norway, using self-hosted open-source components (Supabase for accounts, database and file storage; LiveKit for calls). No third-party analytics, advertising or tracking SDKs are included in the app. Apple’s App Store and TestFlight may provide us with crash and usage diagnostics under Apple’s own privacy terms.
Encrypted local backups of the database and files are kept on the same infrastructure and rotate after 14 days.
4. Use, sharing and retention
We use this information only to run the service, keep it working and safe, and respond to reports and requests. We do not sell it, share it with advertisers, or use it for profiling. Access is limited to the people who operate the service, and to disclosures required by law.
Your account and its content are kept until you delete the account. Reports you submit are kept without personal references after the accounts involved are deleted, so that abuse patterns can still be recognised.
5. Your choices and rights
You can edit your name and bio, turn presence sharing off, block or report a contact, and delete your account at any time from Settings → Delete account. Deleting your account removes your profile, connections, conversations, uploaded files and call history for both participants; it cannot be undone. Copies another person has already saved to their device are outside our control.
Depending on your location, you may have rights to access, correct, delete or restrict use of your personal information, object to processing, or request a portable copy. To make a request, use the contact steps on our support page and identify your message as a privacy request. We may need to verify that a request concerns your account. You may also contact your local data-protection authority; in Norway this is Datatilsynet.
6. This website
These pages do not ask you to create an account, submit a form or provide payment details. There is no advertising, analytics or marketing cookies. The web server records ordinary technical request information such as IP address, browser and requested page in its security logs, which is deleted on rotation.
7. Children, changes and contact
ISI is intended for people aged 13 and over. Oppdrag AS is responsible for ISI. Contact us at post@oppdrag.no for privacy requests. We will update the effective date when this policy changes.