Privacy & security

Your messages are among the most personal things you will ever write. Here is how we protect them — described honestly.

Encrypted at rest

Message content is encrypted before it reaches our database, using strong encryption with keys held separately in a managed key vault. Someone who obtained a copy of the database would find ciphertext, not your words.

Strict access controls

Access to your data is scoped to you. Trusted contacts help confirm you’re okay — they never see your messages. Administrative review is limited to the delivery-safety workflow.

Careful delivery safeguards

Recipient links are single-purpose, high-entropy, and expiring. Every view and download is recorded.

What we don't claim

We don’t claim to be “zero-knowledge” or that “we cannot read your messages.” Delivering a message to a recipient requires our systems to read it at that moment. We tell you plainly what is and isn’t true.