What data does Pigeon collect about me?

We know your email, subscription plan, and your device's public key. Message content, file content, your name (identity) per chat, and who you talk to are never on our servers.

We know very little about you, and none of it is your content

Pigeon collects the minimum amount of data to create your account and let you chat securely. The only "personal" information we collect about you is your email address. There are no analytics, no behavioral tracking, no profiling, no social mapping, no advertising data, and no app usage data.

What we never see

• Your message content
• Your display names or profile photos
• Who you talk to — your social graph is invisible to us
• What chats you are a member of, or what those chats are called
• Anything you've written, shared, or received (only that you did receive something at a certain time)
• Your settings and preferences

What we store on our servers

• Your email address — used for initial sign in and account setup
• Your device's public encryption key — used to deliver messages to your device
• Message delivery timestamps — we know a message was delivered to you, not who sent it or what it said, or what chat it was sent in
• Encrypted messages and files (as ciphertext) — stored as a backup for your account, to assist in delivery to the intended recipient, and are unreadable without your local device keys
• Encrypted device and settings preferences (ciphertext) - used to restore your account settings per device and are also unreadable without your local device keys

Why it matters

Many encrypted messaging apps still expose your social graph — who talks to whom, how often, and what groups you're in. Pigeon can't see that. Chat membership, chat names, and the relationships between members are never stored on our servers at all - it's only on your device locally. This isn't a promise. It's the result of how Pigeon was built intentionally so we have zero knowledge of most of your data, especially the personal data like your message content and who you talk to. The data that would answer those questions is only available on your device locally and never sent to the server.

For more information about what data we collect and how we use it, see our Privacy Policy.