... built LUME because "we can't read your messages" is a claim every messenger makes and almost none of them let you check. So the whole thing is built to be checkable: There's no personal data because there are no columns for it. The user table has nine columns: an id, a username you pick, four public keys, a push token, and two timestamps. No email. No phone. No password hash. Not hidden or encrypted the fields ... ... behind the web one no settings screen, notifications, attachments or groups yet. If you want a battle-tested private messenger today, use Signal. It's older, independently audited, and it's what I'd recommend to my family. LUME