Ikar Privacy Policy

Effective date: 2026/Aug/25

This Privacy Policy applies to the Google Play version of Ikar, provided by IMP-TELEKOMUNIKACIJE DOO BEOGRAD.

Ikar provides secure messaging, file exchange, and voice call functionality for authorized users of an organization.

Account Information

Ikar accounts are not created directly by users inside the application. Accounts are provisioned and managed by the organization or its authorized administrator.

The application may use a phone number as an account identifier and a descriptive display name to identify the user inside the communication system. The display name does not have to be the user's legal name. The user does not have to use their actual phone number; the phone number format is used as an account ID to make matching with the device's phone book easier.

Users may request deletion of their account and associated data by contacting the organization administrator. If required by the organization's account management process, the request may be verified by the authorized administrator responsible for that account.

Messages and Attachments

Messages, images, files, and attachments are protected using end-to-end encryption.

Encryption is performed on the user's device before the communication data leaves the device.

The server receives and handles only encrypted communication data. It does not receive the original, unencrypted message or attachment content.

The server does not possess the cryptographic keys required to decrypt this content.

The server may temporarily store encrypted communication data only as required to deliver it to the recipient.

The application may store message history locally on the user's device.

Calls

Voice call traffic is protected using end-to-end encryption.

The server and administrators do not have access to call content in unencrypted or readable form, and the server does not possess the cryptographic keys required to decrypt it.

Contacts

Ikar may access contacts to display users, start conversations, show contact names, determine which contacts are registered Ikar users, and support contact synchronization required for the application to work correctly.

Where contact discovery or synchronization is enabled, contact information may be processed locally and transmitted to Ikar service infrastructure only for Ikar functionality.

Contact data is not sold, rented, or used for advertising.

Media and Files

Ikar may access media and files when users choose to send, receive, open, or attach content in conversations.

This may include images, videos, audio files, documents, and other files selected by the user or received through the application.

Camera and Microphone

Ikar may use the camera and microphone for application features such as taking photos, recording media, and making voice calls.

Camera and microphone access is used only when required by the selected application functionality.

Bluetooth and Audio Routing

Ikar may use Bluetooth access to support audio routing during calls, including the use of Bluetooth headsets.

Bluetooth access is used only for call audio behavior and device audio management. Ikar does not initiate Bluetooth pairing and does not communicate with other types of Bluetooth devices.

Notifications and Background Operation

Ikar may use notifications to inform users about new messages, incoming calls, missed calls, and other communication events.

Ikar may also maintain background connectivity and call-related services to support message delivery and active or incoming calls, including when the application is in the background or the device is locked.

Data Stored on the Device

Ikar may store application data locally on the user's device, including:

This data is used to provide messaging, calling, notification, synchronization, and security functionality.

Data Sharing

We do not sell, rent, or monetize personal data or communication content.

Data may be shared only in limited cases:

Encrypted message content, encrypted attachments, and call content are not shared in readable form.

Data Retention and Deletion

Account data is retained while the account is active or as required for service operation, security, legal, or organizational purposes.

Encrypted communication data and encrypted attachments may be stored temporarily on the server until delivery to the recipient.

Local message history and attachments may remain stored on the user's device unless deleted by the user, the application, or the organization's administrative process.

When an account deletion request is processed, associated server-side account data is deleted or retained only where necessary for legitimate security, legal, regulatory, or organizational requirements.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published by updating this Privacy Policy.

Contact

For privacy-related questions or account deletion requests, contact:

IMP-TELEKOMUNIKACIJE DOO BEOGRAD
imptmobilelab@gmail.com