Privacy and safety
Honest About Who Can Read It. Firm About Who Can Reach You.
Private conversation is the whole point of Atumpan. Here is exactly how it's protected, in plain words, including where it isn't end-to-end encrypted and why.
End-to-end encryption
Built on MLS, the Open Standard.
Personal chats and calls between adults are end-to-end encrypted with Messaging Layer Security (MLS, RFC 9420), the open standard behind the next generation of secure messaging. The keys live on your devices. Atumpan carries the message but can't read it.
- Forward Secrecy and HealingKeys change as you talk, so one stolen key can't unlock your past, and a conversation heals itself after a device is compromised.
- Every Device Is Its Own MemberYour phone, tablet and computer each hold their own keys. Unlink one and it can't read what comes next.
- Checked by OutsidersBefore encryption is switched on for everyone, the cryptography is reviewed by an independent firm.
Honest labels
Every Chat Says How It's Protected.
We don't blur the line. A chat with a business or inside your organisation's Agoo Workspace can be read by that business or organisation, and chats with anyone under 18 are checked for safety. So those carry the teal shield and a plain sentence, never the lock.
End-to-end encrypted. Personal and group chats between adults, and their calls.
Encrypted on the way and where it's stored, and checked for safety. Business, team and under-18 chats.
Usernames, not numbers
Your Phone Number Stays Yours.
On Atumpan your number is hidden by default. People find you by @username, by your QR code, or by your atumpan.com link, which also opens the app.
- Find Me by Phone Number: OffSwitch it on if you want old contacts to find you. Contact matching uses scrambled numbers and only with your consent.
- One Username, Kept SafeShared with Amee on the same Agoo ID. Old usernames can't be grabbed the moment you change, and well-known names are protected.
Your controls
Small Switches, Plainly Named.
Read receipts, last seen and online are yours to turn off. Strangers can't drop into your chats: their messages wait in requests, with photos blurred, links dead and your receipts hidden until you accept.
- Block and It's DoneA blocked person can't message, call or add you to a group, on Atumpan or on Amee.
- Linked Devices You Can SeeEvery phone, tablet and computer on your account, with one tap to unlink.
Young people
Extra Care for Anyone Under 18.
Chats with anyone under 18 are encrypted on the way and where they're stored, and checked for safety, so harm can be caught. Young people can't be found by username search; they connect through a QR code or link they choose to share.
Reporting and safety
Report It, and It Can Actually Be Acted On.
When you report messages, Atumpan uses message franking: the report carries a verifiable copy of exactly what was sent, so our safety team can act on it even in an end-to-end encrypted chat, without anyone else being able to read your other messages.
- Encrypted BackupsYour backup is locked with a recovery key that only you hold. We can't open it, and neither can anyone who asks us to.
- We Keep as Little as We CanOnly what's needed to deliver your messages, and never the words of an encrypted chat.