Privacy policy

Summary

We built ignotu for one-way messaging with minimal server retention of message content. Payloads are encrypted for transit and stored as ciphertext only while pending delivery, then deleted after delivery acknowledgment or expiry.

Information we collect

• Account identifiers you verify (email and/or phone) and authentication events.
• Hashed contact data for matching— not raw address books in application logs.
• Delivery and read receipt metadata without message bodies after relay deletion.
• Safety data such as blocks and abuse reports (metadata and your submitted context).
• Device tokens for push notifications and standard app diagnostics where enabled.
• On this website: standard request metadata (IP address, user agent, referrer, and pages viewed) used for operations and abuse prevention.

How we use information

We use data to operate the relay, deliver notifications, prevent abuse, comply with law, and improve reliability. We do not sell personal information. We do not operate a web messaging inbox.

Retention

Message ciphertext is retained on servers only for the delivery window configured for the service. Account and safety records are retained as needed to operate the product and meet legal obligations.

Your choices

You can delete the app, request account deletion via support, manage contact sync in the app, and block or report senders. Contact us for privacy requests at [email protected].

Changes

We may update this policy and will post the revised version on this page with an updated effective date.

Effective: September 19, 2026