Products
Encrypted Email Messenger Group Chat
Security
How encryption works What our servers can and cannot see Account security Private.Ki over Tor Private.Ki and VPNs
Company
Pricing About Careers Statement Help center Contact
Language
EnglishEN DeutschDE · soon EspañolES · soon FrançaisFR · soon
Create a free account Sign in
About Private.Ki

Nobody can read your messages. Not us. Not anyone.

Every mail between Private.Ki users, every chat and every group is encrypted on your device before it leaves. The keys are made there and stay there. We keep ciphertext.

How the encryption works What our server sees

One address. Mail and messenger. No phone number, no invitation.

Who can read them us our host our database an advertiser Who can you. And the people you wrote to.
Why we built it

Encrypted email has existed for decades. Almost nobody used it.

01It asked people to manage keys by hand. People did not.

02Encrypted messengers fixed that, then asked for your phone number and left email behind.

03We wanted both, in one app, with the keys handled on your device and the operator’s position written down.

What we believe

Four rules. The product is what is left after applying them.

  1. 01

    Encryption on your device, or it does not count.

    Keys are generated on your device and never leave it. Server‑side encryption is a promise about behaviour. Device‑side encryption is a fact about mathematics.

  2. 02

    Say what the server sees.

    We publish our metadata column as a table: what we hold, what we cannot hold, and what a database dump would contain. The table is here →

  3. 03

    Tell the truth about the cost.

    If you lose your passphrase, nobody can recover your messages. Not support, not an engineer, not us. The app says so before your key exists, not after.

  4. 04

    Do not oversell.

    We have no independent audit yet. Standard, published cryptography is what we can point to today.

What we refuse to build

Most of our product decisions were made by saying no.

A readable copy of your mail. A phone‑number requirement. An advertising business. A recovery backdoor. An invitation list.
What the app tells you

“Your messages are encrypted with it. We hold no copy, so only this passphrase opens them.”

Shown the moment your key is made, before you can continue.
Sign-up warning in the app: the passphrase cannot be recovered by Private.Ki
What it is built on

Nothing invented here. Published cryptography, standard parts.

Keys
Ed25519, generated on your device
Message bodies
AES‑256‑GCM
Packaging
OpenPGP, so the output is readable by other tools
Sign‑in
OPAQUE — your password never reaches the server
Sessions
DPoP‑bound tokens
Clients
One codebase for web, iOS and Android. The Android app is on Google Play. The iPhone app is built and not yet listed.

How the encryption works, step by step →

Who we are

A small, remote team of engineers. That is the whole org chart.

01Not funded by advertising. We do not sell data. There is nothing readable to sell.

02Something ships every day, into a product real people use for encrypted mail right now.

03No job titles, no CVs, no meetings where a written paragraph would do. How we work, in full →

Questions, corrections, or something we got wrong on this page: [email protected]

Create a free account What our server can and cannot see