← Pakkam

Privacy

Pakkam · last updated 7 September 2026

The short version

Everything you write in Pakkam is encrypted on your phone with a key that only your two phones hold. Our server carries it between you and stores it, but cannot read it. What we can see is your Apple sign-in, the city you picked, and that you and one other person are paired. This page lists all of it.

What your phone sends us

That is the whole list. No location, no contacts, no photos, no message history in a form we can open.

Where it lives

On Cloudflare, in a database run by us, in encrypted form. Storing it on a server rather than only on your phone is what lets a note you leave at 8 pm reach your person's Home Screen while your phone is off. The encryption is what keeps it unreadable while it sits there.

How the encryption works, plainly

When you pair, each phone makes a key pair and swaps the public half through our server. From those, both phones compute the same secret, and the server — holding only the public halves — cannot. Every mood and note is encrypted with that secret before it leaves your phone and decrypted only after it arrives on your person's. If we were ordered to hand over your data, we could hand over the scrambled block and nothing else.

Notifications

When your person changes something, our server sends a silent ping to your phone through Apple's push service. The ping carries no words — only "something changed" and a timestamp. Your phone then fetches the encrypted block, decrypts it locally, and decides what to show you. The text of a note never travels inside a notification.

Your location

Never requested and never used. You search for a city by name and pick one from the list; it is a label, not a position. The search query is the only thing sent to Apple Maps. Your time zone comes from the city you picked.

Who else sees anything

No crash reporting, no advertising identifiers, no ad networks. Nothing about you is ever sold.

The waitlist on this website

If you join the waitlist, we store your email address, the order and time you joined, the country your connection came from — from Cloudflare, country only, never a city or address, and never the address itself — a short referral code, and — if you came through someone's link — their code. That is all. We use it to send you one email when Pakkam opens, and to honour the first-100 promise. Write to us at the address below and we will delete it.

We also count visits to this page, using PostHog, so we know which posts brought people here and how many of them joined. It records the page being opened, how far down you scrolled, the form being submitted, and which link or campaign you arrived from. It sets no cookies: the identifier lives in the tab and is gone when you close it.

While the waitlist is open, PostHog also records the visit itself — a replay of the page as you saw it, your scrolling, and where you moved and clicked. We watch these to find out where people give up on the page, which a count of visits cannot tell us. Anything you type is hidden from the recording: the email box is masked before the recording is made, so the address you enter never reaches it and we cannot see it there. We turn this off when the waitlist closes, and we do not ask you to accept it first — if you would rather not be recorded, write to us at the address below and we will delete your recordings.

Cloudflare, which hosts this page, also counts page views and load times through its own Web Analytics. It sets no cookies and does not follow you to other sites. It is switched on by Cloudflare for every site it hosts and cannot be switched off, so we are naming it rather than leaving it unsaid.

Deleting your data

Unpair ends the pair and deletes both encrypted halves and the keys from our server immediately. Your account stays, so you can pair again.

Delete everything does all of that and also deletes your account itself — your Apple sign-in, your sessions and your devices — and revokes Pakkam's Sign in with Apple, so it stops appearing in your Apple Account settings. It then wipes the phone: notes, moods, and the keys in its Keychain.

Your person's half is theirs, and goes when they unpair or delete; we cannot delete it on their behalf, because we cannot read it. Deleting the app removes the copy on your phone but not your account, so use Delete everything first if that is what you want. Nothing is kept in backups beyond 30 days.

Children

Pakkam is not designed for or directed at children under 13.

Getting in touch

Pakkam is made by Kernbase Studio. Questions about any of this: support@kernbase.studio