Transparency report <p> Threema is designed from the ground up to generate as little data as technically possible.
The less data that is generated in the first place, the lower is the potential for misuse and theft.
</p>
<p> We only store data that’s absolutely necessary for the operation of the service, and we store it for the shortest amount of time possible.
All messages are always transmitted in end-to-end encrypted form and are only stored on the server until successful delivery.
Once a message has been delivered to the recipient, it is immediately and irreversibly deleted on the server.
It’s not required to provide personal information in order to use Threema.
We don’t store IP addresses, and we don’t keep message logs.
For further details, please refer to our privacy policy.
</p>
<p> With Threema, the user applies the encryption, not the service provider.
The decryption of a message is only possible with the recipient’s private key.
This private key was generated by the recipient, and we don’t have access to it.
It is therefore technically impossible for us to decrypt users’ messages.
</p>
<p> Threema GmbH is not required to store communication metadata (“data retention”), as it does not exceed the revenue limits set by the Federal Act on the Surveillance of Post and Telecommunications (BÜPF) (version in effect since 01.03.2018) and the accompanying decree VÜPF.
</p>
<p> However, Threema GmbH must provide information that it already has upon judicial order.
Therefore, we make a point of processing and storing as little information about our users as possible.
</p>
<p> Here is how we handle requests for information about our users from authorities: </p>
<ul>
<li>According to article 26 paragraph 2 of the VÜPF, we only deal with inquiries placed through the PTSS according to the procedure mandated by the VÜPF, and that fully meet the formal requirements according to legal examination.
</li>
<li>Foreign authorities have to make an official request for legal assistance in accordance with the Federal Act on International Mutual Assistance in Criminal Matters.
we don’t deal with direct inquiries by foreign authorities.
</li>
<li>If the legal requirements are fully met, we can provide the following information associated with a given Threema ID: <ul>
<li>Hash of phone number, if provided by the user</li>
<li>Hash of email address, if provided by the user</li>
<li>Push token, if a push service is used</li>
<li>Public key</li>
<li>Date (without time) of Threema ID creation</li>
<li>Date (without time) of last login</li>
</ul>
</li>
</ul>
<p> Here’s a statistic of all requests by authorities that we have received since 2014: </p> Year Requests by Swiss authorities Requests by foreign authorities with Swiss legal assistance Requests that have met the formal requirements Requests that didn’t meet the formal requirements Handing over of data (# cases) Handing over of data (# IDs) 2020 105 (*) 104 1 98 558 2019 101 (*) 98 3 93 317 2018 28 (*) 25 3 25 69 2017 2 2 4 – 3 12 2016 – 1 1 – 1 1 2015 1 – – 1 – – 2014 – – – – – – <p> * Since the new BÜPF act has come into force on March 1, 2018, Threema can no longer distinguish between requests by Swiss authorities and requests by foreign authorities with Swiss legal assistance.
</p>
<p> Last update: 2021-01-04 </p>