Privacy Policy

Sentrix ("Sentrix", the "Service") is the secure, end-to-end encrypted communications platform of the Counter Terrorism Department ("CTD"). The Service is delivered and maintained by Tech Net Group (Private) Limited ("TNG") and its child organization Intelligence X One (Private) Limited ("IntelXOne"), and runs on computing infrastructure owned and controlled by CTD, inside CTD's network in Pakistan.

CTD is the controller of personal data processed through the Service. TNG and IntelXOne act as its technology providers and processors. This policy explains what data the Service processes, why, and the protections that apply to it.

1. End-to-end encryption comes first

Sentrix is built so that the content of your communications stays private to the participants. One-to-one messages use the Signal Protocol, group messages use Messaging Layer Security (MLS), and files and media are encrypted with AES-256. Voice and video call media is encrypted end to end.

What this means: message content, file contents, and call media are unreadable to the server, to CTD, and to IntelXOne. Neither we nor CTD can decrypt the contents of an officer's private communications on request.

2. What the Service does NOT do

• The Service contains no advertising and no third-party tracking, analytics, or profiling.
• Sentrix does not use Google or Firebase services. On Android it delivers messages over its own connection, with no external push-notification service.
• On iPhone, Sentrix uses Apple Push Notification service only to wake the app. A notification carries no message content, sender name or file: it says only that a new message has arrived (or, for a call, an opaque call reference and the caller's Sentrix ID). The app fetches and decrypts the message itself, on the device.
• Location is off unless your organisation turns it on. Where CTD enables location monitoring, the Android app reports this device's location to your organisation's server, including while the app is in the background, and shows a persistent notification for as long as it does. The iPhone app does not collect location.

3. Data the Service processes

To operate securely, the Service necessarily processes the following categories of data:

• Account and directory data — your name, service number, rank, designation, department, district, station, and contact details. These come from CTD's central identity system (single sign-on) and are used to operate your account and the officer directory.
• Service metadata — the sender, recipient, time, and size of encrypted messages; group membership; device and session records. This metadata is needed to route encrypted messages to the right recipients and to manage devices. It does not include message content.
• Security and audit logs — sign-in events, security events, and a record of administrative actions taken in the Admin Console. These support security monitoring and accountability.
• Field reports — reports submitted through Sentrix for operational use are reviewed by authorised CTD supervisors and, once moderated, are released one way into the CLERINT Fusion platform. Field reports are accessible to authorised moderators by design and are governed by CTD's operational rules.
• Location (Android, only where enabled) — when CTD enables location monitoring for your organisation, the device's position and the time it was taken, used for officer safety and operational coordination under CTD's policy. It is stored on CTD's server, visible to authorised administrators, and deleted under the retention period CTD sets.
• Limited technical telemetry — to keep the app reliable, the app reports basic technical diagnostics: app version, operating-system version, device model, screen names, and crash or error events. Telemetry is strictly bounded: it never contains message content, file names, free text, or location data, and it is filtered again on the server before storage.

4. Why we process this data

• To provide, operate, and secure the Service and deliver messages and calls;
• To authenticate officers and protect accounts from unauthorised access;
• To detect, investigate, and prevent misuse or security incidents;
• To support the moderation of field reports, as required by CTD's procedures;
• To measure reliability, fix defects, and improve the Service.

5. Storage and security

All Service data is stored on servers inside CTD's own infrastructure in Pakistan. Data in transit is protected with TLS, and the content of communications is protected by end-to-end encryption at all times. The infrastructure is protected by administrative, technical, and physical controls, including network zoning, access control, and continuous monitoring.

6. Who can access what

• CTD administrators manage accounts, groups, and policy settings. They can see directory data, service metadata, and security logs — but not the content of end-to-end encrypted messages or calls.
• Authorised supervisors can read field reports submitted for moderation, as part of their official duties.
• Support personnel from TNG and IntelXOne may access systems only as strictly necessary to operate, maintain, and troubleshoot the Service, under the terms of the contract with CTD. Message content remains inaccessible to them because of end-to-end encryption.

7. Retention

• Account and directory data is retained while your account remains active and is removed or archived when CTD de-provisions your account.
• Encrypted messages and files are retained on the server according to the retention policy configured by CTD for your organisation, after which they are deleted.
• Security and audit logs are retained for the period set by CTD policy.
• Technical telemetry is retained only for a limited operational period.

8. Sharing of data

We do not sell or rent any data, and we do not share it with any third party for marketing or commercial purposes. Data may be disclosed only as required by law or by a lawful order directed to CTD, the data controller. Sentrix runs on CTD's own infrastructure, which is not subject to foreign service providers or foreign legal process.

9. Your rights

Because accounts are issued and managed centrally by CTD, requests to access, correct, or remove your account data should be made to your CTD administrator. Where the law provides individual rights, CTD will apply them in accordance with applicable law. Officers are expected to use the Service for official purposes only and should not use it for private personal communications.

10. Changes to this policy

This policy may be updated from time to time, for example to reflect changes in the Service or in applicable law. The effective date above states when the current version takes effect. Material changes will be notified through the Service or official channels.

11. Contact

For questions about this policy or about your data, contact your CTD IT administrator in the first instance, or the Sentrix support team at sentrix-support@clerint.org.