Privacy policy

Correspondance has no account, no cloud, and no server that sees your messages. This page says exactly what the app touches, where it goes, and what we never receive.

Last updated: 10 September 2026.

What we do not collect

• No message, contact, photo or voice note is ever sent to us. We hold no keys and no copy.
• No analytics, no advertising SDK, no tracker. The app contains no measurement tool.
• No Correspondance account: there is nothing to create with us, so nothing to delete.

The Relay: your server

Your Signal, WhatsApp, Instagram, Messenger, X, Slack and Telegram conversations go through a Relay you install yourself, on your Mac or a machine of yours. It is a Matrix server and bridges (mautrix) running at your place. Between your iPhone, your Mac and your Relay, messages are end-to-end encrypted; keys never leave your devices.

The linked networks (Meta, Signal, Slack, Telegram, X) see the Relay as one more device, under their own terms and privacy policies.

iMessage

On the Mac, the app reads the Messages database locally, with your disk access permission, and sends through the Messages app. Nothing leaves the machine. The iPhone has no access to iMessage.

Notifications on iPhone

To alert you of a new message while the app is closed, your Relay goes through a push gateway we host. It receives only what is needed to wake the app: your iPhone's notification token, the identifier of the room concerned and a counter. Never the message content, nor the sender's name. This data is neither kept beyond delivery nor cross-referenced with anything. Signing out in Settings removes your iPhone from this gateway.

Contacts, microphone, photos

• Contacts: read on the device to name threads and write to someone. Never sent to us, nor to the Relay.
• Microphone and speech recognition: to record a voice note and transcribe it. Transcription happens on the device.
• Photos and camera: to attach a picture to a message. It goes to your Relay, then to the recipient's network.

Assistant and agents

The assistant runs on your Mac or your machine, with your own subscription to the engine you choose (Claude Code, Hermes…). What you send it goes to that engine under its own terms, never to us. An assistant draft never leaves without your approval whenever a third party is in the conversation.

Translation

The Translate button uses Apple's translation, on the device. No text goes to a translation service.

Importing a browser session (Mac)

To link X, the Mac app can, at your explicit request, read your browser session (Brave, Chrome, Edge, Arc) to import it into your Relay. This asks for your consent in the Keychain, and nothing leaves your Mac.

The code is public

Everything above can be checked: the code of the app, the Relay and the agent is on GitHub, under the MIT license.

Contact

For any question about this policy: meffysto@gmail.com.