Untrusted message transport
Messages are encrypted before transport so intermediary systems cannot read protected conversation content.
Tihaya Set · Privacy and security
Public Threat Model
Security is designed around realistic privacy risks and clear user-facing protection boundaries.
Untrusted media transport
Supported protected calls encrypt media at participating endpoints rather than relying solely on a transport provider.
Network observation
Secure connections protect data in transit and reduce unnecessary exposure of user and communication metadata.
Service and operator access
Private encryption keys remain under the control of participating devices and are not disclosed through public user directories.
Device compromise
Device security remains essential: no communication product can guarantee confidentiality on a device fully controlled by an attacker.
Distribution integrity
Official files and published verification information help users confirm that downloaded software matches the distributed release.
Clear security boundaries.
Published claims describe specific observable protections. They are not presented as a guarantee of absolute anonymity.
Private because you pay us. Not because somebody pays for you.