What CHANNEL does instead
- No contact upload, ever. The app can show you your own address book so you can pick a name; that list never leaves your phone.
- No analytics, no advertising identifiers, no third-party SDKs.
- No message history on any server once delivery is confirmed.
- When your contact is in range, no internet connection at all — so no bill, no roaming, and nothing to intercept upstream.
Read how it is done
- How encryption is usedThe keys, the ciphers, and what each one protects.
- Privacy policyWhat the app and our server store, in full.
- Threat walkthroughWho could attack CHANNEL, how, and what each attempt would get them.
- Network metadataWhat a network operator can see, and what it cannot.
- The wire protocolEvery byte a message carries, published for anyone to check.
- Data safetyThe answers given to Apple and Google about the data the app handles.
Read the documentation
The design notes, the wire protocol, the threat walkthrough, the export and privacy documents, and the help pages exactly as they ship in the app are all published at channelmessenger.net/docs. Publishing it costs us nothing: a design that depended on the secrecy of its own description was already broken. We would rather be checked than believed.
If you are pointing an assistant at this. /docs/all.md is the whole documentation in one markdown file, meant to be read end to end.