Privacy Policy
This Privacy Policy explains how Aetheroll ("we", "us", or "our"), developed by Shiva Reddy, collects, uses, and safeguards your information when you use our mobile application and web platform at https://aetheroll.builtbyshiva.com.
Privacy Highlights (TL;DR)
- Zero Data Selling: We never sell, rent, or monetize your personal data.
- No Third-Party Ads: No trackers, ad SDKs, or analytics profiling.
- User-Owned Storage: Your media lives in your own private Telegram channels.
- Hardware-Backed Security: Session tokens are encrypted in device KeyStore/Keychain.
1Information We Collect
We only collect information that is strictly necessary to provide the Aetheroll cloud gallery, backup, and streaming services:
A. Telegram Authentication Credentials
When you authenticate using your phone number or QR code, Aetheroll connects to Telegram's official MTProto API to authenticate your account. We receive your Telegram User ID, display name, username, and an encrypted session token. We do not store your Telegram account password.
B. User Media & EXIF Metadata
When you select photos or videos for upload or enable automatic camera roll backup, the media files (along with technical EXIF metadata such as capture date, dimensions, and file size) are uploaded directly to your specified private Telegram channels. A lightweight hash (BlurHash) is generated to render instant visual placeholders.
C. Device & Network State
The mobile app checks network connection type (Wi-Fi vs. Cellular) to respect your background backup preferences, and checks local available storage capacity to safely manage cache size.
2Mobile App Permissions & Justifications
To provide photo gallery and background backup services on Android and iOS, Aetheroll requests the following permissions:
| Permission | Purpose & Justification |
|---|---|
| READ_MEDIA_IMAGES / READ_MEDIA_VIDEO / READ_EXTERNAL_STORAGE | Allows the app to display your device photos/videos in the gallery picker and upload selected media to your private Telegram vault. |
| FOREGROUND_SERVICE & FOREGROUND_SERVICE_DATA_SYNC | Allows uninterrupted, resilient background upload of large photos and 4K videos even when the app is minimized or the screen is locked. |
| POST_NOTIFICATIONS | Displays active backup progress, items remaining in queue, and completion status alerts. |
| INTERNET & ACCESS_NETWORK_STATE | Required to transfer media chunks to Telegram servers and check if the device is connected to Wi-Fi before initiating large uploads. |
3How We Use & Protect Your Data
Your data is processed strictly for providing and improving the core features of the Aetheroll service:
- To synchronize, organize, and display your media timeline across devices.
- To transcode and deliver high-speed, sub-second edge video streaming.
- To manage automatic camera roll backups according to your configured preferences.
Hardware-Backed Token Encryption
Authentication tokens on mobile devices are protected using the device's hardware security module (Android KeyStore TEE / StrongBox and iOS Secure Enclave Keychain). All transmissions between your client, our edge servers, and Telegram MTProto endpoints are strictly encrypted using TLS 1.3 / HTTPS.
4Third-Party Infrastructure & Disclosures
Aetheroll relies on trusted, industry-standard infrastructure providers to operate:
- Telegram MTProto Cloud Infrastructure: Your photos and videos are stored directly in your private Telegram channels under your Telegram account, governed by Telegram's Terms of Service and Privacy Policy.
- Cloudflare (CDN & Workers): Used to provide edge acceleration, fast video streaming proxy, and temporary sliding LRU caching.
We do not share your media with any other third parties, advertising networks, data brokers, or analytics marketing platforms.
5Data Retention & Deletion Rights
You maintain full ownership and control over your photos, videos, and personal information:
- Media Deletion: When you delete a photo or video within Aetheroll, the message is permanently deleted from your Telegram channel and purged from the edge cache.
- Session Revocation: Logging out from Aetheroll immediately removes all authentication tokens and cached credentials from your device's secure storage.
- Account & Data Deletion Request: You may request complete erasure of any index data associated with your Telegram account by contacting our Grievance Officer at privacy@aetheroll.app. Requests are processed within 15 business days.
6Children's Privacy
Aetheroll is not intended for or directed towards children under the age of 13 (or under 18 in relevant jurisdictions). We do not knowingly collect or solicit personal information from minors. If we discover that personal data from a child has been collected, we will take prompt steps to delete that data.
7Changes to this Privacy Policy
We may update this Privacy Policy periodically to reflect technological changes, product enhancements, or regulatory requirements. Any updates will be posted on this page with an updated revision date.
Grievance Officer & Contact Information
In accordance with the Information Technology Act, 2000, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act (DPDPA), 2023, the name and contact details of the Grievance Officer are provided below:
Shiva Reddy
Founder & Developer, Aetheroll
We will acknowledge your grievance or privacy query within 24 hours and resolve it within 15 to 30 days of receipt.