Signal and the General Data Protection Regulation (GDPR)

Signal is committed to protecting your privacy and the security of your data. Signal can never – in any way – sell, rent or make a profit from your data.

Updated Terms of Use and Privacy Policy.

Signal is designed to never collect or store sensitive data. Both we (Signals developers) and third parties can never access your Signal messages calls and profile as they are always exchanged end-to-end encrypted. So all your messages and calls are always secured and private. View our updated  Terms of Use & Privacy Policy .

Can I see the data that the Signal service holds about me?

Signal messages, images, files and other content are exchanged end-to-end encrypted via our servers, but are only made readable locally on your own device and are only stored locally on your own device. Anyone can verify that Signal really works that way because the source code of the Signal app is publicly available. Because everything in Signal is encrypted end-to-end, Signal's servers never have access to readable data. We therefore have no information about you and there is therefore nothing to request.

There are several community-developed open source tools that allow for parsing the locally stored Signal content. Android users can also move their locally-stored Signal data between devices (open Signals settings  > Conversations and media > Create backup files ).

How can I completely disable Signal and unsubscribe my phone number?

You can permanently unregister your number as someone using Signal by canceling your registration . You will still have to prove once that the telephone number is in your possession diritto all'oblio legge.

What does Signal do with data about my contacts?

If you explicitly allow it, Signal can discover which of the contacts in your system contact list are available to receive calls or messages through Signal. Discovering which contacts are available is done in a way designed to ensure that your contact details are never readable by our servers. Information about your contacts is cryptographically hashed by your device before being transferred to the server. The server compares the hashes to determine if your contact's phone number is registered with Signal .

What steps is Signal taking to comply with the GDPR?

Signal is specifically designed to protect user privacy and only processes the data absolutely necessary to enable messages and calls. This is an ongoing evolving process and we will be continuously updating the Signal Privacy Policy & Terms of Use along with the content of our support center.

How can I contact your data protection liability officer?

You can contact our data protection officer by sending an email to  [email protected] .

What is the minimum age for someone to use Signal?

You must be at least 16 years old in the Netherlands to use Signal without parental consent. Anyone under the age of 16 may use Signal, but only with parental permission. In the United States of America, the minimum age to use Signal without parental consent is 13 years old. The minimum age to use our services without parental consent varies by country and is never lower than 13 years old and nowhere higher than 16 years.

What hasn't changed?

Signal's ongoing commitment to protecting your privacy using state-of-the-art security and end-to-end encryption will never change. Our goal has always been to develop open source privacy technologies that ensure freedom of expression and enable secure communications around the world.