Privacy Policy

HUSH is built on a zero-knowledge architecture. We do not collect phone numbers, email addresses, real names, or device identifiers tied to your identity.

What we store

• Your chosen username (publicly searchable unless you opt out)
• A hashed password and hashed recovery phrase (never the originals)
• Encrypted message ciphertext — we cannot read message contents
• Minimal metadata required to route messages (timestamps, conversation IDs)

What we never do

• Scan your private messages or files
• Monitor your communications silently
• Perform client-side content scanning
• Sell or share your data with advertisers

Reports

When you submit a report, only the content you voluntarily attach is transmitted. We do not automatically inspect your conversations.

Trust & Safety commitment

HUSH does not monitor private conversations. HUSH only reviews content that users voluntarily submit through the reporting process.

Voluntary reports are triaged by an automated Trust & Safety system, reviewed by authorized personnel under role-based access controls, and — where legally required — escalated through a separate Critical Safety Escalation environment. Encryption, anonymity, Stealth Mode, Panic Mode, decoy accounts, and HUSH Vault are unaffected.