Privacy Policy

1. Who we are

Lemniscate is an end-to-end encrypted messenger operated by Lemniscate Labs LLC (“we”, “us”), 30 N Gould St STE R, Sheridan, WY 82801, USA. Contact: [email protected].

2. Our core principle: we can’t read your messages

Lemniscate is end-to-end encrypted by default. Messages and calls are encrypted on your device and can only be decrypted by you and your recipient.

• Your private key never leaves your device. It is generated locally in your browser and stored only on your device.
• Our servers only ever transport ciphertext (encrypted blobs). We cannot read your messages, see your media, or listen to your calls.
• Audio/video call media flows peer-to-peer and is not stored on our servers.

3. What data we process

Provided by you

• Account: a display name and, optionally, an email address (used only to send login codes) or a chosen @username.
• Optional profile: avatar, bio, status — only if you add them.

Processed to deliver the service

• Encrypted messages in transit: stored briefly until delivered, then removed.
• Minimal routing metadata (e.g. recipient address, timestamps) needed to deliver messages. Reducing this metadata further is a core goal of our blockchain design.
• Presence (online / last seen), which you can hide in settings.

We do not

• Use advertising trackers or third-party analytics that profile you.
• Sell your data. Ever.
• Store your private key or your message content in readable form.

4. Wallet & blockchain

Each account includes an automatically generated wallet. The wallet’s private key stays on your device. Public data such as your wallet address and on-chain transactions may be publicly visible by the nature of a blockchain. Do not place private information on-chain.

5. Your rights

You can delete your account in the app at any time; that removes your profile and your public content from our systems. Depending on where you live you may have further rights — for example under U.S. state privacy laws, or under the GDPR if you are in the EU. We honour those requests voluntarily and worldwide, which does not mean we submit to any non-U.S. jurisdiction. To exercise a right, contact [email protected].

6. California residents (CCPA / CPRA)

If you live in California you have the right to know what personal information we collect, to request deletion, to request correction, and not to be discriminated against for exercising those rights. Because of how the product is built, the honest answer to most of these is short: we hold a pseudonymous public key, an optional handle and profile you chose yourself, and coarse operational timing. We hold no message content.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have never done so. There is therefore no “Do Not Sell or Share” opt-out to operate — the answer is already no for everyone.

To make a request, email [email protected]. We may need to verify that the request comes from the holder of the account key.

7. Children

The Service is not directed to children. In line with the U.S. Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from anyone under 13, and we do not permit accounts for anyone under 13. If we learn that a child under 13 holds an account, we delete it. Our minimum age is 16, or higher where local law requires.

8. Data retention & security

Undelivered encrypted messages are kept only until delivery or a short expiry. We use encryption in transit (TLS) and at the application layer (end-to-end). No method of transmission is 100% secure, but our architecture is designed to minimise what is exposed.

9. The wider Lemniscate platform

Lemniscate is one product of Lemniscate Labs LLC. If you also use the Lemniscate website, shop or other services, the company-wide Privacy Policy and Cookie Policy apply there. Buying LMNS happens on that side, not in the messenger.

10. Changes

We may update this policy. Material changes will be reflected here with a new “last updated” date.