What Cipher is
Cipher is end-to-end encrypted team messaging. Conversations marked Secure are encrypted on your device with the Messaging Layer Security protocol (MLS, RFC 9420) before they are sent. The server relays and stores ciphertext it cannot read.
What we cannot see
For Secure conversations, message text, attachments, reactions and edits are encrypted with keys that exist only on the members' devices. The operator of a Cipher server cannot read them, and neither can we.
What the server stores
To deliver messages, a Cipher server keeps: your account identifier (the email address you sign in with), display name, the devices registered to your account and their public key material, which conversations exist and who is in them, message ciphertext and encrypted attachments, and message metadata (sender, time). Channels an organization marks Searchable are stored as readable text on the server so they can be searched and moderated — the app labels these surfaces.
Notifications
Mobile apps register a push token with Google Firebase Cloud Messaging or Apple Push Notification service so your device wakes when a message arrives. Push payloads carry encrypted content or an opaque wake signal, not plaintext.
What we do not do
We do not sell personal data, show advertising, or use message content for advertising or profiling. There are no third-party analytics or tracking SDKs in the apps. Structured server logs carry opaque identifiers and outcomes, never message content.
Data retention and deletion
Messages and attachments are retained according to the policy set by the organization that runs your workspace. Deleting a message removes it from the server; organization administrators may also configure automatic retention sweeps.
Delete your account
To delete your Cipher account and the data associated with it:
1. Ask your organization's Cipher administrator to remove your account — they can delete your
user, devices and memberships from the organization's server; or
2. Email [email protected] from the address you
sign in with, and we will coordinate deletion with your organization's server operator.
Deletion removes your account identifier, display name, device records, and your messages and attachments held by the server, subject to the organization's legal retention obligations. Encrypted message copies already delivered to other members' devices remain on those devices.
Children
Cipher is a workplace tool and is not directed at children under 13 (or the equivalent minimum age in your jurisdiction).
Changes
If this policy changes, the new text appears at this address with a new effective date.
Contact
Navigo Inc. — [email protected]