Don't just trust us. Check.
Every time Yupzap deletes a delivered message from its servers, and every time someone's encryption key changes, a record goes into a public log that can only grow. Nobody, not even Yupzap, can quietly edit or remove a line. Independent witnesses keep their own copy, so a changed log is caught. The log never contains messages, names or phone numbers.
This is a preview. Everything on this page uses sample data.
Log (sample)
- Records in log
- 48,213,906
- Latest signed root
- a3f9 1c07 7e52 …
- Signed
- just now
- Witnesses agree
- Witness 1 ✓Witness 2 ✓Witness 3 ✓
Check a message
In Yupzap, long-press a message you sent, open Message info, and tap the Guardian line. Copy the receipt code and paste it here. Your phone runs the same check automatically; this page lets anyone do it in the open.
The receipt is a fingerprint of "this message copy was deleted at this time". It does not contain the message. The check finds the fingerprint in the log and recomputes the path up to the signed root that the witnesses also hold.
Check a contact
The 60-digit safety code you see on a contact's Guardian screen comes from their public key. This log shows when that key was created and every time it changed, so nobody can swap in a fake key without it showing up here.
Log stream (sample)
What the public will see in real time. Only fingerprints. You cannot tell who sent what, to whom, or when a particular person was online. The entries below are generated sample data.
Government and legal requests
To be published every six months. Counts only, never names. Yupzap cannot read Guardian messages or listen to Guardian calls, so no request, from anyone, can get that content from us.
| Sample period | Count |
|---|---|
| Legal requests received | 14 |
| Accounts named in requests | 19 |
| Requests rejected (not valid or too broad) | 5 |
| Accounts placed on legal hold (deletion paused) | 6 |
| Requests where basic account details were shared | 8 |
| Messages or calls handed over in readable form | 0, not possible |
| Encryption keys handed over | 0, we never have them |
Sample numbers. The first real report will be published after launch.
Basic account details means things like when an account was created and the phone number it was registered with. While an account is on legal hold, its messages show "Removal pending" in Message info, the same as when the other phone is offline. A message is never shown as removed when it was not.
Our promises, in plain words
We can't read your messages
Guardian messages and calls are locked on your phone and unlocked only on the other person's phone. Yupzap never has the keys.
Deletion you can check
When we remove a delivered message copy, it is recorded here. If it hasn't been removed, Message info says "Removal pending", never a false tick.
No secret keys swapped
Every key change is logged in public, and your chat shows a notice when a contact's code changes.
For experts
Everything needed to check the log without trusting this page. A free open-source checker is coming.