Pigeon can't read your messages because they are end-to-end encrypted on your device before they reach our servers and we use zero-knowledge architecture so only you can decrypt them.
Every message you send using Pigeon is encrypted on your device before it goes anywhere. We store an encrypted copy of every message on our servers, but to us it's gibberish (ciphertext) so we can't read it.
This is end-to-end encryption. The "ends" are you and the people in your chat. Nobody in between — not Pigeon, not your network provider, not Apple delivering the messages, not anyone intercepting traffic — can read what you wrote.
End-to-end encryption protects your content from the time it leaves your device to the time it's unlocked by the other members of your chat. Pigeon adds zero-knowledge key architecture (so we couldn't read your content even if we wanted to) for additional security.
For more information about zero-knowledge for your messages, see What does zero-knowledge mean?