# Olvid privacy rating

End-to-end encrypted messenger from France that needs no phone number, email or other personal data; contacts are added by exchanging keys. Certified under the French ANSSI CSPN scheme.

## Summary

Olvid scores 81 out of 100 (grade B) on the messengers criteria. It meets 5 of 8 criteria: no trackers or telemetry, no ads or data sales, end-to-end encrypted by default, no phone number needed and metadata protection. It partly meets open source and independent audit. It does not meet decentralized. It is based in France: Nine Eyes member; EU member (GDPR).

- Website: https://www.olvid.io
- Source code: https://github.com/olvid-io
- Jurisdiction: France. Nine Eyes member. EU member (GDPR).
- Platforms: Android, iOS, Windows, macOS, Linux
- Home page trackers: none found
- Category: [Messengers](https://privacyratings.com/messengers/)
- Grade: B (81/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Partial | The apps and the message distribution server are AGPL-3.0, but server code for paid enterprise features is not published. | https://olvid.io/faq/is-olvid-open-source/ |
| No trackers or telemetry | Yes | The privacy policy states Olvid collects no personal data; Exodus only detects the OpenCensus library bundled with Google's API client, and Firebase Analytics is excluded from the build. | https://www.olvid.io/privacy/en/ |
| No ads or data sales | Yes | Free for personal use and funded by paid licences, with no ads. | https://www.olvid.io/pricing/en/ |
| Independent audit | Partial | Synacktiv's full CSPN evaluation reports are public, but they are older than three years. | https://www.olvid.io/assets/documents/Synacktiv-Olvid-CSPN_Olvid-0.9.2-RTE-v1.2.pdf |
| End-to-end encrypted by default | Yes | All messages, group discussions, calls and metadata are end-to-end encrypted. | https://www.olvid.io/technology/en/ |
| No phone number needed | Yes | No phone number, email or other personal data is needed to create a profile. | https://www.olvid.io/privacy/en/ |
| Metadata protection | Yes | Metadata is encrypted end to end and there is no user directory, so the server cannot identify who is talking. | https://www.olvid.io/technology/en/ |
| Decentralized | No | One central service run by Olvid; the published server code does not federate. |  |

Source: https://privacyratings.com/messengers/olvid/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/messengers/olvid.md