Free to start. Plus from $5 a month.
The free account is the whole product: encrypted mail, messenger, groups, timers, unsend, two‑factor, every platform. Plus removes the limits and adds room. Teams puts one roster and one bill around it. Encryption is the same on every plan.
Plans
Free
The product as it exists today
- Encrypted email and messenger, one address @private.ki
- Ed25519 keys generated on your device, AES‑256‑GCM, OPAQUE sign‑in
- TOTP two‑factor, QR device pairing, QR sign‑in, PIN or biometric lock screen
- Encrypted groups, one key per member
- Self‑destruct timers from 30 seconds to one month, after read or after sent
- Unsend your own messages within one hour
- Undo send, 5–30 seconds
- Destroy peer messages locally, six encrypted reactions, voice messages
- Single‑use invite links and QR invites
- Attachments to 25 MB
- Signatures, recipient autocomplete, search over senders, subjects and addresses
- Archive, trash, swipe actions, key export and import
- Web, iOS and Android
No phone number. No invitation. No card.
Plus
Every limit in Free, removed. Everything in Free, included.
Limits removed
- Unsend without time limit — take back any message you sent, whenever
- Larger groups
- Self‑destruct presets beyond a month — 3 months, 6 months, a year — and a default timer per conversation
- Undo send up to 5 minutes
- Unlimited invite links, each with its own validity and use count
- Unlimited paired devices
Your identity
- Your own domain — [email protected], same keys, same encryption
- Up to 10 addresses and aliases on one account, each with its own signature
- Catch‑all on your domain, so a mistyped address still reaches you
Capacity
- 50 GB encrypted storage
- Attachments to 100 MB planned — needs the larger‑file storage tier
- Scheduled send — write now, deliver at a chosen time
- Priority delivery queue for mail to external addresses
- Full encrypted export and backup of your whole mailbox, restorable on a new account
Comfort
- Custom themes and accent colours
- Priority support from the people who build the product
- Early access to new features before they reach Free
* Indicative. $5 a month on a yearly plan; month‑to‑month will cost a little more. Plus is not on sale yet.
Teams
One roster, one bill, one policy — for organisations
- Everything in Plus, for every seat
- Groups for whole departments
- Admin roster: add, remove and hand over accounts without touching anyone's keys
- Central billing and one invoice
- Shared signatures across the organisation
- Shared self‑destruct policies, applied to every conversation in a team
- Your company domain for every seat
- Onboarding help and a named contact
Pricing is set per organisation and published at launch.
a limit in Free that Plus removes unlocked in Plus included
Free is the product as it exists today. Plus and Teams are planned tiers; everything listed for them that is not in Free is not available yet. No plan will ever gate encryption, two‑factor, self‑destruct timers or the ability to unsend behind a price — Plus only widens the windows.
What changes between the plans — and what never does
| Capability | Free | Plus | Teams |
|---|---|---|---|
| Encryption & security — identical on every plan | |||
| End‑to‑end encryption: Ed25519 keys made on your device, AES‑256‑GCM | Yes | Yes | Yes |
| OPAQUE sign‑in — the server never sees your password | Yes | Yes | Yes |
| TOTP two‑factor, QR device pairing, QR sign‑in | Yes | Yes | Yes |
| Lock screen with PIN or biometrics (iOS, Android) | Yes | Yes | Yes |
| Self‑destruct timers, unsend, destroy peer messages locally | Yes | Yes | Yes |
| Messaging limits | |||
| Groups | Every group encrypted | Larger groups | Larger groups, whole departments |
| Unsend window | 1 hour | No time limit | No time limit |
| Self‑destruct presets | 30 s – 1 month | Up to a year, default per conversation | Up to a year, shared team policies |
| Invite links and QR invites | Single‑use | Unlimited, custom validity | Unlimited, custom validity |
| Encrypted reactions, voice messages | Yes | Yes | Yes |
| Stickers (Ki Friends packs) | 4 packs | 4 packs | 4 packs |
| Undo send | 5–30 s | Up to 5 minutes | Up to 5 minutes |
| Scheduled send | — | Yes | Yes |
| Delivery queue for external mail | Standard | Priority | Priority |
| Attachment size | 25 MB | 100 MB planned | 100 MB planned |
| Signatures | Personal | One per address | Shared, managed by admins |
| Search | Senders, subjects, addresses | Senders, subjects, addresses | Senders, subjects, addresses |
| Identity & domain | |||
| Addresses | 1 @private.ki | 10, including aliases | Per seat, plus aliases |
| Your own domain | — | Yes, with catch‑all | Yes, company‑wide |
| Capacity & devices | |||
| Encrypted storage | Included | 50 GB | 50 GB per seat |
| Paired devices | Standard allowance | Unlimited | Unlimited |
| Export and backup | Key export | Full encrypted mailbox | Full encrypted mailbox |
| Themes | Light and dark | Custom themes and accents | Custom themes and accents |
| Support & administration | |||
| Support | Documentation and email | Priority | Priority, named contact |
| Admin roster, central billing | — | — | Yes |
| Early access to new features | — | Yes | Yes |
What our server can and cannot see is identical on every plan. Read the full list →
Before you pick a plan
Does Free stay free?
Yes. Free is not a trial and does not expire. It is the product as it exists today, with the limits shown above, and those limits will not tighten when Plus launches. Paid plans are how the service is funded; they are not how the free account is squeezed.
Does Plus change the encryption?
No. Keys are generated on your device on every plan, the server sees the same ciphertext on every plan, and the list of what it can and cannot see does not change. Plus widens limits — how long you can unsend, how many addresses you hold — and adds capacity. It never adds security that Free lacks.
What does “from $5 a month” mean?
The indicative price is $5 a month when paid for a year at a time. Month‑to‑month billing will cost a little more; the exact figure is published when Plus goes on sale. Prices are in US dollars. Nothing is charged before launch and joining the list commits you to nothing.
Can I move to my own domain later?
Yes. Your @private.ki address stays yours and keeps working. When you add a domain on Plus you point its mail records at Private.Ki, verify ownership, and choose which address is the default sender. Your keys and your history do not move — the domain is another name on the same account.
What happens to Plus features if I downgrade?
Nothing is deleted and nothing is decrypted. Messages, groups and mail stay where they are. Limits return to the Free values going forward: unsend closes after an hour, extra addresses stop receiving new mail but their history remains readable, and storage above the Free allowance becomes read‑only until you are back under it or return to Plus.
More questions? Visit the Help center →