Can Pigeon read my messages?

Pigeon can't read your messages because they are end-to-end encrypted on your device before they reach our servers and we use zero-knowledge architecture so only you and your chat can decrypt them.

Messages are private by architecture not by policy

Your messages are locked on your device before they go anywhere. We store them and route them to the right people but we can't open them even if we wanted to (and we don't). The key to decrypt your messages only exists on your device.

The difference between can't and won't

A lot of apps say "we don't read your messages." That's a promise. Promises can change.

Ours is different: we genuinely can't. Even if we wanted to, or were asked to by a court, there's nothing to hand over. The only copy of your messages that makes any sense lives on your device and the devices of those you chat with.

We collect some metadata about your messages that's fully explained in our Privacy Policy and our Security pages.

For more on how the encryption works, see Is Pigeon end-to-end encrypted?

For what zero-knowledge means and why architecture beats policy, see What does zero-knowledge mean?