Privacy

Last updated 13 July 2026

Eleven is built so your conversations belong to you and whoever you’re talking to. Not to us, and not to whoever happens to run the server. Here’s what that actually means.

What only you and your recipients can read

Your device encrypts each message before it’s sent and decrypts it when it arrives. The server stores and relays ciphertext it has no way to open. That covers:

• the text of every message;
• attachments, including their file names;
• the sender’s name as it’s carried inside each message;
• display names on the member list;
• group names and photos.

What the server can see

Delivering messages requires knowing a couple of things, though never their contents:

• Who’s in a chat together. The server routes messages to a chat’s members, so it knows who’s in each one — as keys, not names.
• When, and how much. Message timing and sizes, as with any messenger.

It never sees your messages, your private key, or a chat’s key — those only exist on your own devices. Steal the database and you’d learn that keys talk to keys. You wouldn’t learn a name, or a word anyone said.

What we don’t do

• No analytics, no tracking, first-party or third-party.
• No advertising. We don’t sell or share your data.
• No accounts, emails, or phone numbers to chat. You join with a link. (Paying for a space is the one exception — see below.)

If you pay for a space

Chatting needs no identity, but paying is a different contract: when someone pays us, we need to know who they are. Payment happens on Stripe’s page — Stripe collects your email and card details, and we see the billing email (never the card). That identifies the payer only: nobody else in the space gives us anything, and it connects to nothing anyone says, which stays encrypted either way. We use it to run your subscription, not for marketing.

Link previews

Post a web link and the server fetches that page once, to build a preview card: title, description, thumbnail. For that one moment it sees the URL. It doesn’t see the rest of your message. This is the one exception, and it can be switched off.

GIF search

If you search for a GIF, your device asks Giphy directly, so Giphy sees the search terms and your network address — never who you are on Eleven or who you’re chatting with. Our server sees nothing; the GIF you pick is encrypted like any other picture. Don’t use GIF search and Giphy never hears from you.

Notifications

Push notifications go out encrypted and get decrypted on your own device, so neither the notification service nor we can read them.

Keeping and losing data

Messages live on the server only as ciphertext, and every chat is its own self-contained instance. Saving your sign-in takes one tap, and from then on any device can let you back in — the saved copy is itself encrypted with a key only your devices hold. Skip that, lose your only device, and the keys are gone, along with any history only you could read. We never had them to lose.

Children

Eleven is meant for families to use together. It collects nothing beyond the display name a member picks, and there’s no advertising, no feed, and no way for a stranger to reach in.

Contact

Questions about privacy? Email team@elevenmessenger.com.

This page describes how the app works today. It’s meant to be honest, not to be legal advice.