Glow
A small, quiet place to talk with the people who matter. Messages, photos and even reactions are encrypted on your device — so the only people who can read them are the ones in the conversation.
Not private by policy — private because it cannot be otherwise
The server only sees ciphertext
Every message is encrypted on your device with a key only you and the person you are talking to can derive. What reaches our server is unreadable to us.
Photos are encrypted too
Attachments are sealed before upload — including the filename and file type. We store a blob we can neither open nor identify.
Notifications that reveal nothing
Push carries the same ciphertext, decrypted on your phone to show the preview. Apple and Google see that a message arrived, never what it says.
Face ID or fingerprint
Your key can sit behind biometrics, so even someone holding your unlocked phone cannot open your messages without you.
Invite-only
No phone number, no email, no address-book upload. You join with an invite code and pick a username. That is the whole signup.
No ads, no analytics
No advertising identifiers, no tracking SDKs, no crash reporting that phones home. Nothing about you is sold or shared.
Three steps, and none of them involve us
The short technical version, for people who would rather see it than take our word for it.
Keys made on your phone
Your device generates a keypair. The private half never leaves it in usable form — the backup we hold is sealed with your password, which we never see.
A secret only you two share
Your private key and your friend's public key combine (X25519) into a shared secret that neither the server nor anyone watching the network can derive.
Sealed, then sent
The message is encrypted with that secret (XSalsa20-Poly1305) and authenticated, so tampering is detected rather than quietly passed along.
What Glow does not do
Encryption gets oversold. Here is the honest edge of what it protects, so you can decide whether it fits.
Get Glow
Android now, iPhone shortly. You will need an invite from someone already using it.