Security at Qevio
How your messages are protected
- End-to-end encryption. Messages, photos, videos, voice notes, files, calls, stories, about lines and group names and photos are encrypted on your device with the Signal protocol before they leave it. Only the people in the chat hold the keys.
- A relay that cannot read. Our server passes on what it cannot open and deletes it once delivered: messages within 30 days at most, photos, videos and files within 7.
- Every device has its own keys. Tablets and computers you link get their own keys, prove they belong to your account, and you can sign each out from your phone.
- Security codes. Compare the security code with a contact to be sure nobody is in between; Qevio tells you when it changes.
- Encrypted connections. Everything travels over TLS 1.3, and over HTTP/3 where your network allows it.
What we can read
Your phone number, the name on your account, your profile photo, a message you choose to report, and what you send to Support or post in the forum. Nothing else. The Privacy policy says what we keep and for how long.
How we run Qevio
- Our team signs in to Qevio’s console with a password and an authenticator code; every action is recorded.
- Updates are published only through Google Play, the App Store and web.qevio.app.
- Each release lists its security improvements in plain words in the changelog.
Report a security issue
If you think you have found a weakness in Qevio, please write to support@qevio.app with “Security” in the subject, or use Support. Tell us what you found and how to see it again. Please give us time to fix it before you share it, and do not access other people’s data. We reply within 72 hours and credit you if you wish.
Machine-readable contact: /.well-known/security.txt.