people you know is end-to-end encrypted. This page says what that means for moderation, plainly, because it is not what most apps mean.

Last updated: 27 September 2026.

What we cannot do

We cannot see photos, captions, comments, names or album titles. They are encrypted on the phone that made them, with keys we never see. So we do not and cannot scan content, filter it, or review it. There is no automated system looking at your photographs, because there is nothing for one to look at. The same is true for a report: when you report a photo, we do not receive the photo.

What a report contains

When you report a post or a person, we receive:

  • who filed the report;
  • what it points at, and which account that thing belongs to;
  • when;
  • what you wrote in the box, in the clear.

That last line is the one thing about a report we can read, so please say what is wrong in words. We never receive a copy of the content, and we never tell the person reported who reported them. If we remove something of theirs, it disappears for them as it does for everyone, and the app does not say why.

We do know who filed it. Because we cannot check a report against the thing it is about, your word is the whole of it, and a report you know to be untrue is a reason for us to suspend or delete your account. Filing one is among the things the terms ask you not to do.

What we can do

We still cannot see what a report is about, so whatever we do is decided on what the reporter wrote. We can:

  • Dismiss the report.
  • Remove the post or comment the report is about. It goes for everyone, its author included, as if they had deleted it themselves, and it cannot be brought back. The rest of the account is untouched.
  • Suspend the account. A suspended account can still sign in, look at what it already has, export its data and delete itself, but cannot post, comment, react, or send requests. A suspension can be lifted.
  • Delete the account, which is the same deletion the person could have done themselves: their posts, comments and reactions go for everyone at once, and their connections are severed.

How we decide

  • A report about taste or a falling-out is dismissed. The tools below are yours for that, and they work at once.
  • One believable report of something the terms forbid is enough to remove it: a photo somebody had no right to share, an intimate image of a person shared without their consent, or harassment.
  • A second removal from the same account within 90 days suspends that account as well. Once is a mistake anybody can make. Twice is a pattern.
  • A report of threats against somebody suspends the account at once.
  • Anything that sexualises a child is reported, and the account is deleted with what we hold about it set aside for that report, as the child safety standards describe.
  • Somebody whose reports keep being dismissed may be suspended themselves, because filing a report you know to be untrue is against the terms.

A suspension can be lifted if we got it wrong. A removal and a deletion cannot be undone.

What you can do yourself, at once

The strongest tools are yours, and they do not wait for us:

  • Remove somebody. Both of you stop seeing anything the other shared.
  • Block somebody. Everything remove does, and they cannot find you, ask again, or reach you through an album a third person made.
  • Delete a post of yours for everyone.
  • Delete a comment somebody left on your post.

Because there are no strangers, no public profiles and no discovery, the people who can reach you are people you chose, and the way to stop somebody is to unchoose them.

Limits

Reporting is rate-limited so that the queue cannot be flooded. A report about something you cannot see is refused the same way the thing itself would be. We do not accept reports about albums, because an album is a room: report the photograph in it, or the person.

Contact

If something needs a person rather than a button: pykapp+safety@proton.me

The app is operated by people you know llc, 2222 N Alamo St #118, San Antonio, TX 78215, United States.