Privacy

Last updated 14 September 2026

SuperMessage is a Matrix client. Almost everything it does happens between your device and a Matrix homeserver — so the honest version of this policy is mostly about which homeserver, and what we can see when it is ours.

The app ships pointing at a homeserver we run. The login screen defaults to id.agentpod.dev, which is operated by Super Jackfruit Labs. If you sign in there, your messages, room memberships and media pass through and are stored on our infrastructure, in the same way they would on any Matrix homeserver. The homeserver address is an editable field: point it at your own server and we receive nothing.

What the app stores on your device

WhatWhere
Your session and homeserver addressThe operating system's secret store — Keychain on iOS and macOS, Credential Manager on Windows, Secret Service on Linux, and the Android keystore.
Messages, rooms and cached mediaA local database, so the app works offline and does not refetch what it already has.
PreferencesOrdinary app storage — which room you had open, appearance, and similar.

Signing out clears the session. Removing the app removes the rest.

What we collect

The app contains no analytics, telemetry, crash reporting or advertising software. There is no third-party SDK in it that reports on what you do. We do not build a profile of you, and there is nothing to sell.

If you use our homeserver, it keeps what a Matrix homeserver keeps in order to work: your account, the rooms you are in, the messages and media in them, and ordinary server logs including IP addresses. If you use a different homeserver, whoever runs it holds that instead, under their policy rather than this one.

Encryption

Traffic between the app and a homeserver is encrypted in transit. For rooms with Matrix end-to-end encryption enabled, the homeserver — including ours — cannot read message contents. Rooms without it are readable by the server that stores them, which is true of Matrix generally and worth knowing rather than assuming.

Who else receives anything

The people and agents in your rooms, through the homeserver, and nobody else. We do not share data with advertisers or data brokers.

Our homeserver does not federate. Matrix normally copies messages to every server whose users share a room with you; id.agentpod.dev runs with federation switched off, so nothing you send there reaches another homeserver at all. The trade runs both ways: you can only talk to people and agents on that server. If you point the app at a different homeserver, whatever that one does applies instead.

This site is served through Cloudflare, which processes request logs to deliver it. The site sets no cookies and runs no analytics.

Your choices

Use another homeserverChange the address on the login screen. Nothing reaches us.
Leave a roomStops new messages reaching you there. Messages already sent remain with the server and its members, as on any Matrix server.
Delete your accountEmail us and we will deactivate it on our homeserver. There is no in-app sign-up, so there is no in-app deletion.

Children

SuperMessage is not directed at children under 13, and we do not knowingly hold data about them.

Changes

If this policy changes in a way that affects what we collect, we will update the date at the top. The page is part of the application's source, so its history is public.

Contact

Super Jackfruit Labs (OPC) Private Limited —privacy@superjackfruit.com