Understanding our security model, from simple principles to implementation details that protect your conversations.
Unlike most messaging apps, we don't have the keys to unlock your conversations. Seriously. Even if we wanted to, we can't.
Your messages are encrypted on your device before they ever leave. Our servers just shuffle locked boxes around. We never see what's inside. Not your messages, not your files, not your photos. Nothing.
All we see is encrypted noise
What if someone breaks into our servers? What if a rogue employee tries to snoop?
They get nothing. All they find is encrypted gibberish. Because the only place your messages can be unlocked is on your device and your friends' devices. That's it. We built it this way on purpose.
We don't track who you talk to, when you talk, or how often. We don't build social graphs. We don't sell your data to advertisers.
We only know the bare minimum needed to deliver messages: your account exists, and you're online. That's it. Your conversations, contacts, and patterns stay yours.