Privacy Policy

Overview

M2 BOX ("the App", "we", "us", or "our") is an all-in-one business communication platform developed and operated by MTWO SERVICE (M2 IST), headquartered in Cairo, Egypt. The App provides email, team chat, file sharing, and video conferencing services for businesses and organisations.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the M2 BOX mobile application on Android and iOS devices. Please read this policy carefully. If you do not agree with its terms, please do not use the App.

Data We Collect

We collect the following categories of information:

Account Information

• Full name and display name
• Email address (used as your login identifier)
• Password (stored in encrypted form — we never store plain-text passwords)
• Profile photo (optional)
• Organisation / company name

Communication Content

• Emails you send and receive via the App (stored on your hosted mail server)
• Chat messages and group conversations
• Files and attachments you upload or share

Device & Usage Data

• Device type, operating system version, and unique device identifiers (FCM token for push notifications)
• App version and crash/error logs
• IP address at the time of login (for security auditing only)
• Approximate timezone (for message timestamps)

Data We Do NOT Collect

• We do not collect or access your contacts list, camera, microphone, or location without explicit in-app permission requests tied to specific features.
• We do not collect payment card numbers or banking information directly.

How We Use Your Data

We use the information we collect to:

• Provide, operate, and maintain the M2 BOX application and its features
• Authenticate your identity and protect your account
• Deliver push notifications for new emails and chat messages
• Respond to support requests and troubleshoot technical issues
• Monitor and improve app performance and security
• Comply with legal obligations and enforce our Terms of Service

We do not use your communication content for advertising, profiling, or selling to third parties.

Data Sharing

We do not sell, trade, or rent your personal information. We may share data only in the following limited circumstances:

• Firebase (Google LLC): We use Firebase Cloud Messaging (FCM) solely to deliver push notifications. The device token transmitted to Firebase is used only for this purpose and is governed by Google's Privacy Policy.
• Hosting Provider: Your account data is stored on servers operated by M2 IST (MTWO SERVICE). Server infrastructure may be co-located with third-party data centre providers bound by confidentiality agreements.
• Legal Requirements: We may disclose information if required to do so by law or in response to valid requests by public authorities (e.g., a court order).

Data Storage & Security

Your data is stored on secured servers. We implement industry-standard security measures including TLS encryption in transit, encrypted password storage (bcrypt), and access controls limiting who can view your information.

Data is retained for as long as your account is active. Upon account deletion request, we will permanently remove your personal data within 30 days, except where retention is required by applicable law.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Push Notifications

M2 BOX uses Firebase Cloud Messaging (FCM) to send push notifications about new emails, chat messages, and important account events. To receive notifications, your device token is registered with FCM.

You can disable push notifications at any time through your device's system notification settings (Settings → Notifications → M2 BOX). Disabling notifications does not affect your ability to use the App.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request deletion of your account and associated personal data.
• Portability: Request a machine-readable export of your data.
• Objection: Object to certain types of processing.

To exercise any of these rights, please contact us at privacy@m2.ist. We will respond within 30 days.

Children's Privacy

M2 BOX is intended for business and professional use and is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal information, please contact us immediately at privacy@m2.ist and we will take steps to delete such information.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we will notify users via an in-app notice or email.

Your continued use of M2 BOX after any changes constitutes your acceptance of the revised Privacy Policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Company: MTWO SERVICE (M2 IST)
• Email: privacy@m2.ist
• Website: m2.ist
• Support: box.m2.ist/contact.html