Messy privacy policy

Last updated: 18 September 2026

Messy is a private messaging app run by one person for a small circle of friends. There is no company behind it, no advertising and no analytics. This page says what the app and its server keep, for how long, and who can see it.

What is encrypted

Messages, photos and captions are encrypted on your phone before they are sent, using a key that only the phones in the conversation hold. The server stores and forwards the encrypted copy and cannot read it. The same is true of the optional “spoons” energy status: the level, any note and any tags are encrypted for the people you chose, and the server keeps only the latest encrypted copy.

What the server can see

The server necessarily knows some things in order to deliver messages:

• Your display name and your short handle (the code friends use to add you).
• Which conversations exist and who is in them.
• When messages are sent, their size, and who they are addressed to.
• Which devices belong to your account, and a public key for each.
• If you turn on the spoons status: who you chose to share it with and when you updated it, but not the level or note.
• Your IP address while the app is connected, as with any internet service.

What is kept, and for how long

• Encrypted messages and photos are deleted from the server three days after everyone in the conversation has read them, and are deleted from every phone on the same schedule.
• Messages you unsend are deleted from the server and from other phones.
• A spoons status is deleted at your chosen daily reset time.
• Account details (name, handle, devices) are kept until the person running the server removes your account, which you can ask for at any time.

Notifications

If you turn on notifications, the app registers with Apple or Google so the server can wake it. The notification itself never contains a message, a name, or a spoons level; it only says that something new is waiting.

Who else is involved

Nobody. There are no third-party services other than Apple’s and Google’s notification systems described above, and the hosting of the relay server. No data is sold or shared.

Your choices

• You can unpair a phone from Settings at any time; this deletes the local copy of your messages from that phone.
• You can ask the person running the server to remove your account and its data.
• The spoons status is off unless you turn it on, and you can turn it off or clear it at any time.

Contact

Contact the person who invited you, who runs the server, or email support@tlbmiss.com.