How your privacy is protected

Keys stay with you

Identity and device keys are generated on your device. Message content is encrypted before it reaches our servers, and attachments get their own random key before upload.

We cannot read your private content

There is no administrator key that unlocks private chats, vault items, notes or files. Our staff can see account and billing metadata needed to run the service — never your private content. The only exception is evidence you explicitly choose to submit with an abuse report.

Devices and recovery

Every session appears in your device list and can be signed out remotely. Your vault key is wrapped using a recovery-derived mechanism, so losing your recovery phrase can mean losing access — that is the trade-off of real encryption.

What we will not claim

We will never describe this product as untraceable or promise absolute anonymity. On the web, screenshot blocking and true background execution are not available, and some notification behaviour depends on your phone. We say so instead of pretending otherwise.

Independent review

Cryptographic components are built on established, reviewed designs, and an independent specialist audit is a release requirement before we make any stronger claim.