- Your labels
- How you describe the people you know (family, work, a client) is yours. The person you describe sees it only if you both turn on sharing; nobody else ever does.
- Read receipts
- Only both ways: you see theirs when they see yours.
- Strangers
- A message from someone you don’t know arrives as a request: one message until you answer. Declined, they never know.
- Under 18
- No public page, no money cards, no messages from organizations they didn’t write to first, and adults are told when a conversation includes a minor.
- Private conversations
- End to end encrypted: a fresh AES-256-GCM key for every message, wrapped for each device allowed to read it with P-256 ECDH and HKDF, and the whole envelope signed by the device that sent it. The server keeps envelopes, never words. Up to 64 people, 20 devices each.
- Your devices
- A new device reads nothing until you say it’s yours on one you already have. Your security code is your first device’s, so it stays the same as you add devices and changes only when you start over.
- Recovery
- A recovery key you hold, shown once, brings your private conversations back when every device is gone. Caime keeps nothing of it.
- What isn’t hidden
- Who is in a conversation, when messages are sent and how long they are, and reactions. The app says so.
- Blocks and reports
- A block stops every write, both ways. Reports are read by a person and acted on; every action is in the audit log.
- Your data
- Download all of it, or delete your account, from Settings. Ended sign-ins are kept 30 days, security records a year, a handle you let go of a year from everyone.
- The server
- A content security policy on every page, no third-party scripts, no ads, no tracking across sites, and a backup checked after every dump.
- Money
- Never held or moved by Caime. A split records who owes whom; nothing else.
- AI
- Off until an adult turns it on, never on a private conversation, and everything it infers is a suggestion you accept or don’t.