Minimal logs are kept for the purpose of maintaining system continuity. None of them contain user communications or message tracking information.

Our logs contain no message content or tracking information related to the delivery of messages. What little they do record contains only hashed user and device information.

Our live database contains only hashed sender and receiver device information, and only while encrypted messages are routing through the system.

This means that we or anyone viewing the database in real time cannot read any messages or determine which users are communicating.

In fact, at a given moment, the only way we can determine who is communicating with whom is if we’re given both usernames to start with, which amounts to simply confirming for someone that which they already know.