What data does Pigeon collect about me?
We know your email, pricing plan, and your device's public key. Message content, file content, your name per chat, and who you talk to are never on our servers.
We know very little about you, and none of it is your content
Pigeon collects the minimum amount of data to create your account and let you use the chat service: your email address. There are no analytics, no behavioral tracking, no advertising data, and no app usage data.
What we never see
- Your message content
- Your display names or profile photos
- Who you talk to — your social graph is invisible to us
- What chats you are a member of, or what those chats are called
- Anything you've written, shared, or received
- Your settings and preferences
What we store on our servers
- Your email address — used for initial sign in and account setup
- Your device's public encryption key — used to deliver messages to your device
- Message delivery timestamps — we know a message was delivered to you, not who sent it or what it said, or what chat it was sent in
- Encrypted message (ciphertext) — stored as a backup for your account and is unreadable without your local device keys
- Encrypted device and settings preferences - used to restore your account settings and are also unreadable without your local device keys
Why it matters
Many encrypted messaging apps still expose your social graph — who talks to whom, how often, and what groups you're in. Pigeon can't see that. Chat membership, chat names, and the relationships between members are never stored on our servers at all - it's only on your device locally. This isn't a promise. It's the result of how Pigeon was built intentionally so we have zero knowledge of most of your data. The data that would answer those questions is only available on your device locally and never sent to the server.
For more information about zero-knowledge, see What does zero-knowledge mean?
For more information about what data we collect and how we use it, see our privacy policy.