Carrier Pigeons Carrier Pigeons

PRIVACY POLICY  ·  UPDATED AUGUST 2026

We built this so there would be nothing to write here.

This is the whole policy. It is short because we do not collect much, and we would rather you read it than skim it.

What we never ask for

There is no sign up. We do not ask for your name, your phone number, your email address, or a password. We never read your contacts or your photo library unless you pick a photo to send, and then we only get that photo.

Because we never ask, there is no account of yours on our side. If someone demanded your records from us, there would be nothing to hand over.

Your messages

Messages are end to end encrypted. They are scrambled on your phone and only unscrambled on the phone of the person you are writing to. The keys that do this live on your phones and never leave them.

Our servers pass encrypted messages along. We cannot read them. An encrypted message waits on the server until your phone picks it up, and it is deleted automatically after fourteen days no matter what. In practice phones pick messages up within moments of them being sent, long before that.

Your conversation history is stored on your phone, encrypted. If you delete the app, that history is gone. We have no copy of it.

Pairing

You add someone by holding your phones together in person. Both of you have to agree. Nobody can start a conversation with you any other way, so there is no search, no directory, and no way to look you up.

You can unpair from anyone at any time. When you do, the connection between your phones is destroyed and cannot be restored.

What the servers see

To move a message from one phone to another, our servers briefly handle an encrypted bundle and a random identifier that is not tied to you. They also see the internet address your phone connects from, the way any website would. We do not keep those logs.

We use no analytics services, no advertising tools, and no third party trackers in the app.

During the beta

The app is distributed through TestFlight, which is run by Apple. Apple knows you installed a beta app and may collect crash reports. That part is theirs, not ours, and their rules apply to it.

If you write to us with feedback, we have whatever you chose to tell us, and nothing more.

Changes

If we ever change this policy, we will say so in the app before the change takes effect, and we will keep the old version available so you can see what moved. We will not quietly start collecting something new.

Questions are welcome.

If something here is unclear, or you think we got it wrong, write to us and we will answer plainly.

hello@carrierpigeons.app