Montana has no accounts. There is no phone number, no email address and no registration. Your identity is a 24-word phrase generated on your device and known only to you.
Every message, call, photo, video and file is end-to-end encrypted with post-quantum cryptography (ML-KEM-768 and ML-DSA-65). Servers relay only sealed envelopes and sealed content chunks they cannot open. Undelivered material is stored sealed for at most 7 days, then deleted.
The app sends anonymous diagnostic logs to help us find and fix defects. These logs contain event records, timings and error codes together with the device model, OS version and app build. They never contain message content. They carry no identity: the diagnostic ID is a random value unrelated to your address or phrase, and peer identifiers are replaced with irreversible salted hashes on your device before anything is sent. Diagnostic data is kept for at most 14 days.
Montana contains no advertising, no third-party trackers, no third-party analytics. Nothing is sold and nothing is shared with anyone.