Glow app icon
End-to-end encrypted

Glow

Messages only the two of you can read

A small, quiet place to talk with the people who matter. Messages, photos and even reactions are encrypted on your device — so the only people who can read them are the ones in the conversation.

Download for Android Open in your browser

Not private by policy — private because it cannot be otherwise

🔒

The server only sees ciphertext

Every message is encrypted on your device with a key only you and the person you are talking to can derive. What reaches our server is unreadable to us.

🖼

Photos are encrypted too

Attachments are sealed before upload — including the filename and file type. We store a blob we can neither open nor identify.

🔔

Notifications that reveal nothing

Push carries the same ciphertext, decrypted on your phone to show the preview. Apple and Google see that a message arrived, never what it says.

👤

Face ID or fingerprint

Your key can sit behind biometrics, so even someone holding your unlocked phone cannot open your messages without you.

Invite-only

No phone number, no email, no address-book upload. You join with an invite code and pick a username. That is the whole signup.

🚫

No ads, no analytics

No advertising identifiers, no tracking SDKs, no crash reporting that phones home. Nothing about you is sold or shared.

How it works

Three steps, and none of them involve us

The short technical version, for people who would rather see it than take our word for it.

1

Keys made on your phone

Your device generates a keypair. The private half never leaves it in usable form — the backup we hold is sealed with your password, which we never see.

2

A secret only you two share

Your private key and your friend’s public key combine (X25519) into a shared secret that neither the server nor anyone watching the network can derive.

3

Sealed, then sent

The message is encrypted with that secret (XSalsa20-Poly1305) and authenticated, so tampering is detected rather than quietly passed along.

Worth knowing

What Glow does not do

Encryption gets oversold. Here is the honest edge of what it protects, so you can decide whether it fits.

Metadata is not hidden. The server has to know where to route a message, so it knows which accounts exchanged one and when — just not what it said.

Forget your password and your history is gone. Not recoverable by you, and not by us. That is the price of genuinely not holding your key.

Your device is the weak point. Encryption protects messages in transit and on our server. Someone with your unlocked phone can read what is on it — which is what the biometric lock is for.

Get Glow

Android now, iPhone shortly. You will need an invite from someone already using it.