What is on
the disk.
This describes the implementation. It is short because it is a description rather than a defence, and it changes when the code changes.
Direct conversations
One-to-one message bodies and media are encrypted on your device with keys derived from the participants' P-256 and ML-KEM-768 identities. The server stores the ciphertext, the routing metadata, timestamps, membership, receipts and the public-key material other clients need. It cannot open the content.
Groups and channels
Group and channel messages travel over HTTPS and WSS and are guarded by server-side membership and role checks. Their content is stored in a form the server can process. Livara does not describe those conversations as end-to-end encrypted, here or anywhere else.
Credentials and recovery
Login uses SRP, so your password is never transmitted during authentication; the server holds a verifier instead. A backup of your direct-chat private keys is uploaded only after being encrypted on your device, and restoring it requires your recovery phrase.
What the service stores
- Username, profile fields, privacy preferences, contacts and chat folders
- Dialog membership, messages, reactions, receipts, edits, deletes and sync cursors
- Direct-chat ciphertext, and group or channel message content
- Authorised media objects, and push tokens when you enable notifications
- Operational security records such as revoked-token signatures
Media access
Message, profile, story and wallpaper media requires authentication and an object-level permission check on every request. Media is not placed in a cross-account service-worker cache, and unattached or expired uploads are cleaned up automatically.
What you can do
Export your account data, clear your copy of a conversation, delete messages where your role allows it, sign out of a device, or delete the account entirely after proving your password. The cryptographic detail behind all of this is on the security page.
Contact
Privacy questions go through the existing Livara support channel. The canonical copy of this page is at https://chat.livara.org/privacy, and it is updated when the implementation changes rather than on a schedule.
LAST UPDATED: 18 JULY 2026