Your data. Your control. By architecture.
We built Surf so that even we can't access your private data. That's not a limitation. It's the design.
Security layers
Built to protect you.
Not just promise to.
No data to sell
There’s no ad infrastructure. No advertiser API. No data marketplace. We literally cannot monetize your data because we never built the systems to do it.
Peer-to-peer voice
Voice calls connect directly between devices. Our servers broker the connection, then get out of the way. We can’t listen because the audio never touches our servers.
Permanent deletion
Delete your account and we delete everything. Posts, messages, media, backups. Not archived. Not retained for legal reasons. Gone.
What we see.
What we can't.
We see what's public and what we need to run the service. Everything else? Your DMs, voice calls, algorithm settings. We can't access any of it.
What we can see
What we can't
Delete everything.
We mean it.
No retention policies. No "we keep backups for legal reasons" loopholes. When you delete your account, we delete everything. Including backups. Your data stops existing.
One button
Hit delete in settings. 30-day grace period if you change your mind.
Everything gone
After 30 days: posts, DMs, media, profile. All backups. All servers. Irreversible.