PM FAQ

Everything you need to know about PM Private Messenger's security, privacy features, and usage

Security & Privacy

No. PM servers never store conversation logs, call logs, or message metadata. Messages exist only in memory during transmission and are automatically deleted after delivery. This ensures complete privacy and prevents any data breaches.

PM uses the Signal Protocol, an industry-standard encryption method. Messages are encrypted on your device and can only be decrypted by the recipient's device. Even if someone intercepts the message in transit, they cannot read its contents. Each message uses a unique encryption key for maximum security.

Your messages are stored only on your device and are automatically deleted after a configurable period or when you log out. If you lose your device, your messages cannot be recovered - this is by design for your privacy protection. We recommend setting up auto-delete for added security.

No. Your contacts are saved as aliases and hidden behind your PIN. The contact list is invisible until you enter your PIN, and even then, contacts are displayed by their chosen aliases, not real names or phone numbers. No one can discover your contacts without your explicit approval.

Features & Usage

Signing up is simple and anonymous: 1) Create a unique username (this is your public identity), 2) Set a 6-digit PIN for security, 3) That's it! No phone number, email, or personal information required. Your privacy starts from the moment you join.

To add a contact: 1) Enter their exact username (case-sensitive), 2) Send a contact request, 3) Wait for them to approve your request. Both parties must approve before you can message each other. This mutual approval system prevents spam and unwanted contact requests.

No, PM does not support chat backups. This is a deliberate security feature to ensure complete privacy. Messages are designed to be ephemeral and exist only during your active session. If you need to save important information, we recommend copying it manually before the auto-delete timer expires.

Group messaging is not currently available in PM. This is intentional to maintain the highest level of privacy and security. Group conversations create complex security challenges and metadata exposure. We're focusing on perfecting one-on-one secure communication first.

Currently, PM supports one device per account for maximum security. Multi-device support introduces complex security challenges and potential vulnerabilities. Each device maintains its own separate identity and contact list. We're exploring secure multi-device solutions for future releases.

Technical

PM uses the Signal Protocol, the same encryption standard used by Signal and other secure messaging apps. It provides perfect forward secrecy, meaning each message uses a unique encryption key. Even if one key is compromised, past messages remain secure. The protocol is open-source and has been extensively audited by security experts.

Voice and video calls use the same end-to-end encryption as text messages. Call metadata (who called whom, when) is not stored on our servers. Calls are peer-to-peer when possible, or relayed through our servers without any logging. Like messages, call history exists only on your device and follows the same auto-delete rules.

PM uses open-source encryption protocols (Signal Protocol) and will be partially open-source. The core encryption and security components are open for transparency and auditability. However, some server-side components remain proprietary to prevent abuse and maintain service integrity. We believe in transparency while protecting our infrastructure.

PM includes safety numbers that you can verify with your contacts to ensure you're talking to the right person. These numbers are unique to each conversation and change if someone's device or keys change. While optional, verifying safety numbers provides the highest level of security against sophisticated attacks.

Support & Help

Your PIN cannot be recovered for security reasons. If you forget your PIN, you'll need to reinstall the app and create a new account. This ensures that even if someone gains access to your device, they cannot access your conversations without your PIN. We recommend choosing a PIN you'll remember or storing it securely.

We take security seriously and welcome responsible disclosure. If you discover a security vulnerability, please contact us at security@willowitsolutions.com with detailed information. We operate a bug bounty program for verified security issues. Please do not publicly disclose vulnerabilities until we've had time to address them.

For support, visit our documentation at /docs/ or contact our support team at support@willowitsolutions.com. For beta users, we provide priority support. Please include your device type, OS version, and a detailed description of the issue. Note that we cannot help recover lost PINs or deleted messages for security reasons.

Still have questions?

Join our beta program and be part of the future of private messaging

Contact Support