PRIVACY POLICY · UPDATED AUGUST 2026
This is the whole policy. It is short because we do not collect much, and we would rather you read it than skim it.
There is no sign up. We do not ask for your name, your phone number, your email address, or a password. We never read your contacts or your photo library unless you pick a photo to send, and then we only get that photo.
Because we never ask, there is no account of yours on our side. If someone demanded your records from us, there would be nothing to hand over.
Messages are end to end encrypted. They are scrambled on your phone and only unscrambled on the phone of the person you are writing to. The keys that do this live on your phones and never leave them.
Our servers pass encrypted messages along. We cannot read them. An encrypted message waits on the server until your phone picks it up, and it is deleted automatically after fourteen days no matter what. In practice phones pick messages up within moments of them being sent, long before that.
Your conversation history is stored on your phone, encrypted. If you delete the app, that history is gone. We have no copy of it.
You add someone by holding your phones together in person. Both of you have to agree. Nobody can start a conversation with you any other way, so there is no search, no directory, and no way to look you up.
You can unpair from anyone at any time. When you do, the connection between your phones is destroyed and cannot be restored.
To move a message from one phone to another, our servers briefly handle an encrypted bundle and a random identifier that is not tied to you. They also see the internet address your phone connects from, the way any website would. We do not keep those logs.
We use no analytics services, no advertising tools, and no third party trackers in the app.
The app is distributed through TestFlight, which is run by Apple. Apple knows you installed a beta app and may collect crash reports. That part is theirs, not ours, and their rules apply to it.
If you write to us with feedback, we have whatever you chose to tell us, and nothing more.
If we ever change this policy, we will say so in the app before the change takes effect, and we will keep the old version available so you can see what moved. We will not quietly start collecting something new.
If something here is unclear, or you think we got it wrong, write to us and we will answer plainly.
hello@carrierpigeons.app