What we see and what we don’t
This page describes what the code does today. The design is in our threat model.
| We never see | We do see |
|---|---|
| Your photos, videos, messages and stories | Encrypted data, its size class and when it passes through |
| Who your friends are, and who is in your groups | A random inbox that receives encrypted messages, and how many are waiting |
| Who sent a message | The public key of your account and the day it was created |
| Your phone number or email: we never ask | A push token from Apple or Google, if you allow notifications |
What others see
Hetzner, who stores the encrypted files, sees your IP address, the time and the size class when your phone uploads or downloads one. We do not keep logs of this, but we do not control Hetzner’s.
Apple and Google deliver a wake-up that says nothing except “look at your inbox”.
Your friends can always take a picture of the screen with another phone, or use a modified app that ignores “view once”.
If we are asked for data
We can hand over only what is listed under “We do see”. We cannot hand over content, friends or groups, because we do not have them.
What we cannot protect you from
- A photo of your screen taken with another phone.
- An unlocked phone in someone else’s hands.
- Anyone who controls the server noticing when data moves, and how much.
- A compromised phone.