Security
Encrypted by default.
It starts with strong encryption and a business model that has no reason to hoard your data.
Encrypted where it counts.
Direct messages, and group threads up to 256 people, are end-to-end encrypted on an X3DH key exchange and a double ratchet for forward secrecy. There is no toggle and no plaintext fallback: if encryption fails, the message does not send.
Our privacy approachWe collect to run the product, not to profile you.
Surf runs on subscriptions, so no ad-targeting profile is built and nothing about your activity is sold. We do collect what it takes to rank your feed and keep the account safe, on published retention windows. Card details never touch our servers, they go straight to Stripe.
What we don't collectUnder the hood.
Every device gets its own keys, and private keys never leave it. Group threads use sender keys up to 256 people, so a message is encrypted once and every member can read it. Above that size, group messages are not end-to-end encrypted, and the app says so. Compare a 60-digit safety number to confirm you are talking to the right person. Voice and video calls run on WebRTC with DTLS-SRTP. They connect device to device when the network allows it. When it does not, the media goes through an encrypted relay that cannot read it.
We have not completed a third-party security audit or SOC 2 yet. When we do, it will say so here. Found a vulnerability in the meantime? Email contact@surfplatforms.com and we will work with you.