What is end-to-end encrypted
In one to one chats and in groups:
- text messages;
- photos, clips, voice messages and files, including the thumbnail and the file name;
- reactions in groups and the emoji of super reactions;
- the text of polls, plans, wheels and questions in groups, plus the answers to questions;
- Moments saved from messages: the server only copies the encrypted version.
Your phone encrypts all of it with keys made on the device. Your private key stays in the phone's secure area and never reaches us. What reaches us is ciphertext we cannot read, so we cannot make thumbnails or blurred versions from it either.
What is only protected in transit
These travel encrypted in transit (HTTPS) and are stored on our server so your friends can see them, but the server can open them:
- the Daily Pulse and its collages;
- your profile: name and photo;
- group names and emoji.
What the server sees
Metadata: who talks to whom and when, who is in each group, the BPM, the type of each message, file sizes, the tier of super reactions, poll votes, who is coming to a plan and its time. The server needs it to run the product. Notifications contain the name of the person writing and, for a group, the group name, never the text of the message. The full list is in the privacy policy.
When a key is missing
While the move to full encryption lasts, there is one more exception. In a one to one chat, if one of you does not have a key yet (for example, on an old version of the app), text waits for the key and is not sent. Photos, clips, voice, files, super reactions and what you type in Raw Mode go out in the meantime protected only in transit. The app shows this in Profile, under How Pulsgram protects you, while the exception is on.
What we do not do
- We do not read your messages. Our admin panel has no screen that searches inside chats.
- Message content does not appear in logs and the server never puts it in notifications.
- No ads, no third party trackers and no analytics in the app.
The only exception is one you control: the text of a message you report reaches us with the report, so a moderator can see it.
New phone
The key lives only on your phone, so older messages, with their photos, clips, voice and files, cannot be opened on a new one. See New phone.