Security

Last updated November 2, 2026

What Fariin does to keep your conversations private, what it cannot see, and how to tell us if you find a problem.

Encrypted end to end

In a one to one chat, your messages and calls are encrypted on your phone before they leave it. The key that opens them exists only on the two phones. We cannot read those messages, see those photos or listen to those calls, and neither can anyone who breaks into our servers.

Group chats, channels, stories and group calls are not end to end encrypted. Calls joined from a call link, and one to one calls that someone adds a third person to, count as group calls. All of these are encrypted on the way and where they are stored, but they can be read on our side. We are working on end to end encryption for group calls. The privacy policy explains exactly what this means.

Everything in transit is also carried over an encrypted connection, so an encrypted message travels inside a second layer of encryption.

What we can see

To run an account and deliver a message we hold a small amount of information: who you are, which devices you use, and when something was sent. The privacy policy lists all of it, and says how long each part is kept.

Your account

• Fariin never asks for your phone number and never uploads your contacts.
• You can protect your account with a passkey.
• You can lock the app with Face ID, Touch ID or your passcode.
• Fariin works on one phone at a time. Signing in on a new phone signs the old one out, and you can see your device in Settings under Devices.
• You can turn on Sign-in alerts in Security notifications to get an email when a new device signs in.
• You can check that a one to one chat is really with the person you think: open their profile, choose Verify Encryption and compare the safety number with them.

How the service is protected

• Database rules are enforced by the server, so one account cannot read another's data even with a modified app.
• Access to the servers is limited to the two people who run Fariin and protected by two factor authentication.
• If there is ever a breach that puts your data at risk, we will say so. The privacy policy sets out how and when.

No system is perfect. Because one to one messages and calls are encrypted end to end, a breach of our servers would still not expose what you said in them.

Report a security problem

If you find a weakness in Fariin, the app, this website or the servers behind them, use the contact form and choose "A security problem in Fariin". Tell us what you found and how to reproduce it.

• We will reply to confirm we have it, and tell you when it is fixed.
• Please give us a reasonable time to fix it before telling anyone else.
• Do not read, change or delete other people's data while testing, and do not disrupt the service. Research done in good faith within these limits will not be pursued.