Privacy Policy
ComSend Secret is an end-to-end encrypted messenger. It is built so that we cannot read your private conversations, and so that we collect as little about you as possible. This page says plainly what happens to your data. There are no third-party advertising networks, no analytics trackers, and we never sell your information.
Your identity
ComSend Secret does not use your phone number, email, or real name to identify you. When you set up, the app generates a cryptographic key on your device. The private half of that key never leaves your device and is never sent to us. Your display name and profile photo are stored on your device and are only shared with people you deliberately connect with.
Your messages
Private messages between you and another person are end-to-end encrypted. They are encrypted on your device and can only be read by the intended recipient. We cannot read them — not staff, not by court order, because we do not hold the keys.
To deliver a message when the other person is offline, the encrypted message passes through our relay server, in Australia, which stores only the encrypted (unreadable) message and deletes it once it has been delivered. The relay does process metadata needed to route a message — the sender and recipient's public keys and the time — but not its contents. In plain terms: we can see who is talking to whom, and when, but never what is said. We keep this routing metadata only as long as needed to deliver the message, and we never sell it. Your message history itself is stored on your device, not on our servers.
Contacts
ComSend Secret does not upload or harvest your phone's address book. You add contacts one at a time, by exchanging codes with people you choose. Your contact list stays on your device.
The White Rabbit assistant contacts (Alice & White Rabbit)
ComSend Secret includes two built-in assistant contacts operated by White Rabbit. Unlike your private chats with other people, these are automated services, and messages you send to them are read in order to answer you — so conversations with the assistant contacts are not private in the same end-to-end way. Those messages are processed by White Rabbit's own systems in Australia and, for some replies, by a third-party AI provider (DeepSeek) — used only for these assistant conversations and only to generate a reply, never for your private person-to-person chats. Don't share confidential or legal case details with the assistant contacts; that belongs in our secure vault, not a chat.
What we do not do
- We do not require or store your phone number or email.
- We do not upload your address book.
- We do not use advertising networks or third-party analytics/trackers.
- We do not sell, rent, or trade your data.
- We do not read your end-to-end encrypted conversations.
Where your data lives
Our relay and assistant services run on infrastructure White Rabbit operates in Australia. Your keys, contacts, and message history live on your own device; uninstalling the app removes them.
Your choices & rights
You can delete your identity, contacts, and history at any time by clearing the app's data or uninstalling it. Under the Privacy Act 1988 (Cth) you may ask what personal information we hold — which, by design, is close to none. Contact us at privacy@white-rabbit.com.au.
Changes
If this policy changes we will update this page and its effective date. Material changes will be surfaced in the app.
White Rabbit Australia · comsend.com.au · privacy@white-rabbit.com.au