Privacy by Architecture, Not by Promise

How Privacy Works

Zero Message Storage

Messages exist in server memory only for the 1–3 seconds it takes to process them. Once a message is rewritten and delivered, both the original and the rewrite are discarded. There is no database of conversations, no chat history, no archive, and no way to retrieve past messages — by anyone, including us.

Content-Free Logging

Application logs are essential for debugging, but ours never contain message text. Our logging framework (Pino) is configured to redact message bodies at the point of ingress, before any processing occurs. Logs contain only operational metadata: timestamps, status codes, and error types.

Encrypted Transport

Every connection in the chain uses TLS encryption — from your phone to the carrier, from the carrier to Quell, from Quell to the AI provider, and back again. Data in transit is never exposed.

Stateless AI

Each message is processed independently. There is no conversation history, no memory of prior messages, and no context carried between interactions. The AI provider (Fireworks AI) is configured with no data retention and no training data sharing. Your messages are never used to train any model.

Who Touches Your Data

Every third-party service that handles any part of your data is listed below. No exceptions.

For full details, see our Privacy Policy.