Your conversations are yours. Not ours.

Who we are

OUT Messenger (“OUT”, “we”) provides the OUT Messenger app for iPhone and this website. For anything about your data, write to info@outmessenger.com.

What we never collect

• Your phone number
• Your address book or contacts
• The readable text, photos or voice of your messages
• Your location
• Advertising identifiers or tracking data
• Cookies or analytics on this website

Message content

Message and live-captured media content is encrypted on the sender’s device and is intended to be readable only by the participating devices. The relay stores ciphertext envelopes only until delivery or expiry, never longer than seven days.

Identity and routing

The service processes a cryptographic OUT ID, public key material, one-time prekeys, short-lived authentication sessions, invitation tokens and an optional public @username. It does not require a telephone number or upload the iPhone address book.

Integrity and notifications

Apple App Attest material is processed to distinguish authentic app instances from automated abuse. If notifications are enabled, an encrypted APNs device token and a content-free wake-up signal are used. Notification payloads do not include message text or sender identity.

Operational protection

Source network information is transformed into keyed digests for short-lived rate limiting. A coarse daily activity date supports inactive account cleanup, and short-lived sending counters enforce fair-use limits. These records support service operation, not advertising. The application is designed not to write message plaintext to service logs.

Profiles and safety

If you choose a generated avatar, the service stores its signed style settings, not an uploaded photo. Blocking stores the two account routes needed to prevent contact. An abuse report stores a selected category and keyed account digests for up to 30 days; it contains no message text or attachments. If you contact support by email, your email address and the information you choose to send are available to support. Do not include private messages or recovery codes in a support request.

Retention and deletion

Undelivered encrypted envelopes expire automatically. Inactive account routing records normally expire after 180 days. A verified subscription extends this deadline through its paid period plus 30 days. You can permanently delete the server account and the device identity from Settings; related server records are removed, subject to infrastructure backup and recovery retention.

OUT Plus (photo and voice)

Optional OUT Plus subscriptions are purchased and managed through Apple. To confirm access, the service verifies Apple’s signed purchase and current subscription status. Access grants last five minutes and daily sending counters expire at the next UTC day. Keyed purchase ownership records are retained through the last verified paid period plus 180 days to support restoration and prevent duplicate use; these limited records may outlive deletion of an OUT ID. Receipts, recovery codes and payment card details are not stored by the relay. Deleting an OUT ID does not cancel an Apple subscription.

Where data is processed

Our service runs on Microsoft Azure in the European Union (North Europe region). Push notifications are delivered through Apple Push Notification service, and purchases are handled by Apple. We do not sell or share personal data for advertising.

Legal basis

We process the limited data described here to provide the service you asked for (performance of a contract) and to keep it secure and free of abuse (our legitimate interests). Purchases are processed by Apple under its own terms.

Your rights

Depending on where you live, including under the EU General Data Protection Regulation, you can ask to access, correct, delete or export your data, and object to or restrict its processing. You can delete your OUT account at any time in Settings. To exercise any right, email info@outmessenger.com. You also have the right to complain to your local data protection authority.

Age limit

OUT is for people aged 18 and over. We do not knowingly provide the service to anyone younger.

Limits

Memory-based handling limits the history OUT creates; it cannot guarantee that iOS or a recipient never makes a copy. Recipients can still capture or record what they see. OUT is under active security review, and its privacy and security properties must not be treated as a guarantee against every device compromise or forensic technique.

Changes and contact

We will publish material changes on this page and update the date above. Questions and requests: info@outmessenger.com.