Legal
Acceptable Use Policy
Last updated: Pre-launch draft
We cannot read your messages — but we can act on credible reports of abuse. Here is what's prohibited, and an honest account of how enforcement works when content is invisible to us.
01The principle
Cipher exists so people can communicate freely and privately. That freedom is not a license to harm others. Use Cipher responsibly: use it to live freely, not to harm.
We are honest about the shape of enforcement. We cannot read your messages, so we cannot proactively scan content. We can and do act on credible reports of abuse.
02Strictly prohibited
- Child sexual abuse material (CSAM) or any sexual content involving minors — zero tolerance, immediate termination, and reporting to the appropriate authorities (e.g. NCMEC) as required by law.
- Credible threats of violence, or content that incites or facilitates violence against people.
- Using Cipher to commit, facilitate, or coordinate illegal activity.
- Harassment, stalking, or targeted abuse of others.
- Impersonation intended to deceive or defraud.
- Infringement of intellectual property rights that are not yours to use.
- Abuse of the service itself — spam, fraud, or attempts to circumvent security, rate limits, or account protections.
03How enforcement actually works
Because of the zero-access architecture, we do not see message content and cannot monitor it. Our enforcement depends on reports from users and from people who receive content.
- We provide in-app reporting so abuse can be flagged with the context needed to act.
- Confirmed CSAM results in immediate account termination and legally required reporting.
- Other violations may result in suspended or terminated access, depending on severity.
- We commit to timely review — with priority service levels for CSAM and credible threats.
04What we honestly cannot do
- We cannot proactively scan or pre-screen private messages — there is no readable content for us to scan.
- We cannot recover deleted content, for a report or for anyone, including you.
- We cannot identify a user from message content, because we never have it.
05Product safeguards
Alongside reporting, Cipher uses design-level 'circuit breakers' that reduce abuse without reading content — for example, group-size limits, no public user discovery, and limits on new-account velocity to curb spam and coordinated abuse.
06Reporting and transparency
Abuse can be reported through the in-app reporting tools available at launch. We intend to publish regular transparency reports covering reports received, actions taken, and legal process — so our enforcement is accountable, not opaque.
This is a pre-launch draft and will be reviewed by counsel before general availability.