Your messages do not pass through us.

In short

• There are no accounts on KaiCorp Labs servers. Your identity is a set of keys created on, and kept on, your devices.
• Messages, names and files travel end-to-end encrypted. The server keeps them encrypted until your devices collect them, and cannot read them.
• The app has no advertising, analytics or trackers, and does not ask for your phone number, your email or your phone's contacts.
• Arveil is open source: everything this page says can be checked in the source code.

On your device

Your identity (its private keys), your contacts and the names you give them, your conversations and your files are kept in an encrypted profile on your device. That profile's key lives in the system's secure storage (the Android or macOS keychain). The names you give your contacts never leave your device.

The identity kit you export is an encrypted file that you store wherever you like; its key is shown once and Arveil does not keep it.

On the server of whoever invited you

To deliver messages, Arveil uses a server (a "relay") run by the person who invited you. If KaiCorp Labs runs that server, what follows is what we keep; if someone else runs it, it is what they keep.

The server keeps:

• The public keys of your identity and devices, and the device and mailbox identifiers the app generates. None of them is your name, your phone number or a system identifier.
• The encrypted messages and files waiting to be collected, with their size and time. They are deleted once collected or when they expire.
• Which invitation you used to join.

The server sees your IP address for the duration of each connection, to apply limits against abuse, and does not keep it. It does see when you connect and how often you receive messages. What it cannot see is the content: not the messages, the names, the files or group titles.

On KaiCorp Labs servers, connections come in through Cloudflare, which sees your IP address and when you connect, like any network they cross. What travels through it is end-to-end encrypted, so Cloudflare cannot read it either.

If you turn on notification hints, the server pokes the address you configure when your mailbox goes from empty to non-empty, with no sender, size or content. It is off by default.

Updates

The version you download from this website or from GitHub can check for updates if you turn it on in Settings → Updates. It is off by default. When it is on, it downloads a signed announcement from arveil.kaicorplabs.com at most once a day, without sending your version, your identity or cookies; the web server only sees the IP address and time of that request. It never contacts your messaging server for this.

The Google Play version does not make this check: Google Play updates it.

Google Play

If you install Arveil from Google Play, Google handles the download and updates under its own privacy policy, and may share aggregated install statistics with the developer and, if you allow it on your device, crash reports. Arveil includes no Google or third-party library for analytics, advertising or copy protection.

This website

This website uses no cookies or analytics and loads nothing from third parties. The server that hosts it keeps technical request logs (IP address, time and page) that rotate automatically and are not analysed.

Deleting your data

There is no account to close on any KaiCorp Labs server: your identity is on your devices.

1. On your device. Uninstall Arveil or clear its data (on Android: Settings → Apps → Arveil → Storage → Clear data). This deletes your identity, keys, contacts, conversations and files from that device. Repeat on each linked device.
2. On the server. If KaiCorp Labs runs your server, write to contact@kaicorplabs.com from any address, saying which invitation or server you used. We will delete your membership, public keys, mailboxes and any encrypted messages and files still waiting within 30 days, and confirm it. The server's backups rotate, and deleted data leaves them within a few weeks. If someone else runs your server, ask them.

Messages other people have already received are on their devices, as with any messaging app, and cannot be deleted from yours.

Contact

For any privacy question, write to contact@kaicorplabs.com. A person reads it. For security issues, follow the security policy.

Last updated: 27 September 2026.