End-to-end encryption

Your chats, group chats, calls and the media you send in them are end-to-end encrypted. Messages are encrypted on your device and decrypted only on the devices taking part in the chat. Nothing is sent or stored in the clear.

What's end-to-end encrypted

• Message text, in one-to-one and group chats.
• Photos, videos, documents and other attachments.
• Voice messages and video notes.
• Stickers, polls, contact cards and live locations you send in chats.
• Voice and video calls, including group calls and screen sharing.

See it for yourself

Open Settings > Encryption and security. It shows This device is encrypting, and explains how it works. There's nothing to switch on: key generation, sessions and the ratchet all happen on their own. The page exists so the encryption is visible rather than merely claimed.

How it works

• Messages are encrypted with the Signal protocol.
• Keyed to the devices of the day. Each message is encrypted for the devices that existed when it was sent. Every linked computer has its own keys, and logging a device out destroys its keys straight away.
• Your history follows you. So you never have to manage backups, Zaplog holds a backup key for your account and applies it when you sign in, which is what brings your history back on a new phone. An Account PIN adds a second lock to this.

What isn't end-to-end encrypted

Some features need Zaplog's servers to read content to work. These are encrypted in transit and at rest, but not end-to-end:

• ZapRooms posts, comments, channels, room DMs and voice channels.
• ZapCloud files, ZapNotes, Organized, ZapFit and your browser bookmarks and history.
• Conversations in the Zaplog tab.
• Anything you send to Zaplog's AI, such as a message you translate or a chat you ask Zappy about.

Zappy's own conversation, memories and automations are encrypted on your phone before they're backed up.

Older versions

If someone in a chat uses a very old version of Zaplog, the chat shows that messages aren't end-to-end encrypted yet, until they update.

For the full picture, including an honest explanation of the backup key, see the Privacy Policy.