Privacy by Architecture, Not by Promise

How Privacy Works

Zero Data Retention

Quell and its AI providers process and immediately discard all message content. Messages exist in server memory only for the 1–3 seconds it takes to process them. Once a message is rewritten and delivered, both the original and the rewrite are discarded. There is no database of conversations, no chat history, no archive, and no way to retrieve past messages — by anyone, including us.

Raw Originals Sent to Your Email

Because Quell doesn’t store messages, we send every unmodified original to your email address for your own records. This is the only copy that exists anywhere — Quell discards the message immediately after delivery. You control which messages you receive and can change your email address at any time from the link in each email.

Content-Free Logging

Our logs never include your messages. Our logging framework is configured to redact message bodies at the point of ingress, before any processing occurs. Logs contain only operational metadata: timestamps, status codes, and error types.

Stateless AI — No Phone Numbers, No History

Each message is processed independently. There is no conversation history, no memory of prior messages, and no context carried between interactions. The AI never sees sender or recipient phone numbers — only the message text and a first name. Our AI inference provider is US-based and SOC 2 Type II compliant, configured with zero data retention and no training data sharing. Your messages are never used to train any model.

Encrypted Transport

Every connection in the chain uses TLS encryption — from your phone to the carrier, from the carrier to Quell, from Quell to the AI provider, and back again. Data in transit is never exposed.

Who Touches Your Data

Every third-party service that handles any part of your data is listed below. No exceptions.

For full details, see our Privacy Policy.