Privacy & Safety

We don't keep your messages. Here's exactly what we do keep.

Simit's servers are a relay. Once a message is delivered, it's gone from our servers. Here is everything that is stored, how, and for how long, including what Simit does not do.

Encryption Why not E2E?What we keep Registration Lock Notifications Last seen & receipts Device backups Mutual contacts Group invites Block & report App Lock

Simit is not end-to-end encrypted

Every message, photo and request between the Simit app and our servers is encrypted in transit using TLS. Photos are also encrypted on your phone before upload.

But Simit is not end-to-end encrypted. While a message briefly waits for delivery, it is held on our servers in a form our systems can process. Once the recipient's phone has it, it's permanently deleted from our servers. We don't keep message history, so we can't look back through your past conversations.

If you need end-to-end encryption, please choose a messenger that offers it. Full details are in our Privacy Policy.

Why isn't Simit end-to-end encrypted?

Most messengers encrypt the message archives they keep. We chose not to keep an archive at all. Your message travels over an encrypted connection, waits on our server only until your friend's phone receives it, and is then permanently deleted. There is no message history on our servers to leak, sell or hand over.

To be clear: while a message waits for delivery (usually seconds; at most 30 days if the recipient is offline), it sits on our server in a form our systems can process. That's why we don't call Simit end-to-end encrypted.

Not keeping an archive is not the same as end-to-end encryption, and we don't claim it is. It means there's very little on our servers to begin with.

Data on our servers

What our servers keep, and for how long

Some information has to exist for a messenger to work: your account, who you're connected to and brief delivery records. Here it all is.

What Simit's servers store, how, and for how long
What	Stored how	For how long
Message history	Not stored on our servers. It lives only on your phone and the phones of the people you talk to.	Never kept
Message content text, edits, receipts	Held on our servers only while waiting for delivery, in a form our systems can process (not end-to-end encrypted). Encrypted in transit with TLS.	Until every recipient's phone has it, then permanently deleted. 30 days at most.
Photos	Encrypted on your phone with a random per-photo key, then stored as an encrypted file in private storage. Never a public link, never a CDN.	Until every recipient has downloaded it. 30 days at most.
Delivery records	Content-free: message ID, chat ID, sender ID and time. Used only so delete for everyone, edits, receipts and reports work.	30 days
Contacts	Phone numbers only, stored as keyed hashes (HMAC-SHA256). Names never leave your phone; raw address-book numbers aren't stored. We also store who you're connected to, your groups and your blocks.	While your account is active
Your phone number	Stored encrypted. Looked up by keyed hash. Shown only to people who already have it.	While your account is active
Profile	Display name, optional username, bio and photo. Your profile photo is the only image we serve publicly, so your contacts can see who you are.	While your account is active
Registration Lock PIN	Only a strong one-way hash (Argon2id). Never stored in readable form.	Until you turn it off or delete your account
Reports	The reported message and up to 10 messages before it, sent from the reporter's phone. The only way message content reaches our moderators.	As long as needed to review and act on the report
Server backups	Encrypted database backups for disaster recovery. A message still waiting for delivery could appear in a backup.	7 days

We also keep basic server logs (errors, request timing) and your device's push token so notifications work. See the Privacy Policy.

Registration Lock

Stop SIM-swap takeovers

In a SIM swap, someone convinces a mobile carrier to move your phone number to their SIM card. From then on, your SMS codes go to them. On most apps, that's enough to take over your account.

With a Registration Lock PIN, an SMS code alone is not enough to register your account on another phone
Choose a 6 to 12 digit PIN in Settings → Privacy Settings → Registration Lock
Repeated wrong guesses are blocked
Forgot your PIN? You can register again after 7 days of inactivity on your account

Registration Lock is optional, but we recommend it. Keep your PIN somewhere safe; we can't recover it for you.

The Simit welcome screen asking for a phone number to sign in

Your controls

Notifications, receipts and backups

Private notification previews

Previews are Name only by default, so message text stays off your lock screen. You can choose Nothing, Name only, or Name and message.

Notifications are delivered through Apple's push service. Message text passes through it only if you choose Name and message.

Fair by design

If you hide your last seen, you can't see other people's either. If you turn off read receipts, you won't receive other people's. You'll still see when your messages are delivered.

Device backups are your choice

Include messages in iPhone backup is off by default. While it's off, messages never leave your phone, but they're lost if you lose or replace it. Turn it on to include them in your iCloud or computer backup.

Signing out or deleting the app deletes your messages from that phone.

Mutual contacts

Strangers can't message you

A direct chat only works when you both have each other's phone number saved. There's no open inbox, no message requests from strangers and no way to cold-message someone who doesn't know you.

Both people must have each other saved before a direct chat opens
Not matched yet means they don't have your number saved, or haven't synced their contacts
If someone blocks you, Simit never tells you. It just shows not matched
Your phone number is shown only to people who already have it

Understand match status

A Simit direct chat showing the Not matched yet banner with a Check again button

Group invites

Consent before you join any group

Nobody can put you in a group without asking. Being added creates an invite. Until you accept, you won't receive the group's messages or notifications, and the group won't appear in your chats.

See who invited you, the group name and its members
Simit warns you up front: You've blocked N people in this group
If you join anyway, you'll see their messages in that group, because you chose to
Decline any invite, or turn off group invites in Privacy settings

The Simit group invitation sheet showing who sent the invite, a warning about one blocked member, the member list and Accept and Decline buttons

Block, report & moderation

Zero tolerance for abuse, without reading everyone's messages

Because we don't keep messages, moderators only see what you choose to send them in a report.

Block anyone

Open a chat's info screen and tap Block. Blocked people can't message you directly, and their typing and online status are hidden. Manage your list in Settings → Blocked Users.

Report with evidence

Long-press a message and choose Report, or report a person or a whole group from the chat info screen. Your phone sends the reported message and up to 10 messages before it to Simit for review. This is the only way message content ever reaches our moderators.

Zero-tolerance moderation

Our team reviews every report. Violating content is removed with delete for everyone, and accounts that break our Terms are suspended and signed out.

Urgent? Email us

For anything urgent, email [email protected]. We'll act as quickly as we can.

App Lock

Your chats, behind Face ID

Turn on App Lock and Simit asks for Face ID, Touch ID or your passcode before your conversations appear. When you switch apps, Simit blurs its preview so your chats aren't visible in the app switcher.

Face ID, Touch ID or passcode before your chats open
Private, blurred preview in the app switcher
Choose who sees your last seen, profile photo and about info
Control message forwarding and group invites

How to turn on App Lock

Your data

We collect the minimum, and we never sell it

Keyed-hash contact matching

Only phone numbers are checked, never names. Our servers compute a keyed hash (HMAC-SHA256 with a secret key) of each number, match it, and discard the raw number. Your own number is stored encrypted.

TLS in transit

All traffic between the app and our servers runs over TLS, including messages, photo uploads and the real-time connection. As explained above, Simit is not end-to-end encrypted.

No ads, no trackers

Simit doesn't show ads, doesn't include third-party analytics or advertising SDKs and doesn't track you across apps. We don't sell, rent or trade your personal information.

Delete any time

Export your account data or delete your account from Settings. No email or password is ever collected.

The full details are in our Privacy Policy and Terms of Service. Privacy questions: [email protected].

Messaging that respects you

Download Simit. Your messages live on your phone, not on our servers.

Download on theApp Store

Requires iPhone. Questions first? Visit Support.