Privacy-first messaging, explained plainly
PIING is a free messenger for iPhone and iPad, made by Hectic Software Limited in the UK. Here is exactly what it protects, how, and where the limits are.
One-to-one chats are end-to-end encrypted
One-to-one text, photos, videos, voice messages and files are encrypted on your phone before they are sent, with post-quantum protection, and each message gets a fresh key. Only the other person's phone can open them. Our servers store scrambled data for those messages, and their notifications never contain the message.
You can check that nobody is in the middle: open the chat's Encryption screen and compare the safety code, in person or by scanning a QR code. Look for the lock.
Where messages are encrypted on the way instead
Web chat, saved notes, channels and Live are encrypted on the way to our servers, not end to end. Group calls will be too, when they are available. Group chats, Stories and media are end-to-end encrypted only when everyone involved has a current version. The app shows a lock on messages that are end-to-end encrypted, so you can always tell.
PIING's encryption has not yet had an independent third-party audit. We say so here rather than let you assume otherwise.
No ads, no ad trackers, no selling your data
There are no ads and no advertising trackers in PIING, and we never sell or rent your personal data. The service providers we use are listed in the Privacy Policy.
You decide who can find you
Contact discovery is off until you turn it on. When you do, your phone turns each number and email into a scrambled code, and only those codes are compared with people already on PIING. Your address book is not uploaded and the codes are not stored. This stops casual looking, but phone numbers are a small enough set that a determined person could work some of them out, so we are upgrading it to a stronger method.
Location only for the friends you pick
The Friends Map is off by default. When you share, only the friends you choose see you, each update expires after 4 hours, and Ghost Mode hides you instantly.
Keep talking with no signal
Nearby lets PIING phones reach each other over Bluetooth, hopping through up to 5 nearby PIING phones. Messages relayed this way are sealed so the phones passing them on can't read them.
Lock it, leave it
Lock PIING with Face ID. Delete your account in the app at any time: it's removed permanently after 30 days, and signing back in during that time cancels it.
Get PIING free on the App Store