OFF Castle is end-to-end encrypted messaging whose keys come from a physical die, not just software. The server can't read your messages — not because it promises not to, because it can't.