Your privacy
We know as little about you as possible.
No phone number, no ads, no trackers. Our server passes on sealed messages it can't open and forgets them once they're delivered. This page is the short version; the privacy policy is the full one.
What we can't see
Sealed on your device, opened only on the devices of the people in the chat. Not on our server, not by anyone who breaks into it.
What you write, send or say
Messages, calls, photos, videos, voice notes, files, stickers, polls and reactions.
Where you are
A shared location is sealed like a message. We never see it.
Your hidden chats and backups
The vault, your nicknames for people, and your backup file stay on your devices.
Your contacts
Only checked if you switch it on, forgotten straight away, never kept.
What we do know
Every messenger needs a little to deliver your messages. This is all of ours.
Your username
And your display name, picture and "about" line if you add them. Your password and recovery words are stored scrambled, in a way we can't reverse.
Which chats you're in
And roughly when messages are sent, so we can deliver them. Not what's in them.
What you send the AI assistant
Only if you use it, and only the messages you pick. It's the one thing that isn't end-to-end encrypted, and the app says so.
Short-lived safety data
Sign-in attempts and reports you send us, kept only as long as they're needed.
Your rules, per chat
Each chat has its own privacy settings, and the most private choice always wins.
Ticks and typing
Choose what the other side sees: read ticks, typing, online, last seen. Or none of it.
Disappearing messages
On a timer, or a while after they're read.
No screenshots, no forwarding
Turn them off for a chat, on devices that allow it.
Ghost chats
No ticks, no online or typing, nothing about when you were last seen. Groups can hide names too.
No phone number needed
You sign up with a username and a password. That's your account.
Recovery words, not a number
Twelve words you write down when you sign up get you back in if you forget your password.
A number only if you want one
Add it to sign in with, and, only if you turn it on, to be found by people who already have it.
Strangers need your link or PIN
Set a contact PIN, or share your contact link, and nobody you don't know can message you first.
Under 18
We ask your year of birth when you sign up and don't keep it. If you're under 18, we keep only the date your protections end.
Strangers can't find you
People you don't know can't look you up, message you or add you to a group. To them, you don't exist.
You choose who's in
Your contact link, an invite and a group link still work, because you chose to share them.
No 18+ channels
Channels marked adults-only are out of the directory and out of reach.
The full standards are in our child safety standards.
Your choices
Everything here is in the app, not in an email to us.
Delete your account
Settings, tap your name, Delete my account. Everything our server still holds for you goes with it. How.
Take your chats with you
Export a chat, or make an encrypted backup, any time.
Unused accounts go
An account nobody uses for 4 months is deleted, after a warning.
Ask us
Anything about your data: privacy@hushpiper.com.