01 / PRIVACY
Some things are
just for you two.
Start a separate private conversation when a moment calls for it. Messages and attachments are encrypted on your devices, with keys that stay there.
Understand your privacyA LITTLE LESS NOISE. A LOT MORE CONNECTION.
A little space for the conversations that matter. Thoughtfully simple messaging, with privacy you can understand and data you can keep close.
✳Made for real connection. Built around your choice.
hello, you. A glimpse of Milo. Illustrative conversation.
ROOM FOR WHAT MATTERS
A familiar place to say hello. With a little more thought put into what stays yours.
01 / PRIVACY
Start a separate private conversation when a moment calls for it. Messages and attachments are encrypted on your devices, with keys that stay there.
Understand your privacy02 / INDEPENDENCE
Milo can run on your own infrastructure. Choose the server you connect to, and keep control of where your conversations live.
Explore self-hosting03 / PEACE OF MIND
An existing trusted device approves new ones. Compare safety codes with your person, and see when the devices in a private conversation change.
FEELS LIKE A BREATH OF FRESH AIR
A quiet interface. Thoughtful details. Space for your words, photos, files, and the people on the other side.
Two distinct conversations. Two clear privacy boundaries.
Only your participating devices can read these messages.
An interactive visual preview. Messages are examples, not a live chat.
PRIVACY SHOULD BE UNDERSTANDABLE
Trust starts with knowing how things actually work.
Read the privacy overviewPrivate message and attachment content is end-to-end encrypted using MLS. Your server relays encrypted content; it does not have the decryption keys.
Standard conversations are readable by the server and can be accessed by authorized administrators. They have a separate history from private conversations.
The server can still see information such as accounts, devices, contacts, message timing, and message sizes. Reports may include material you explicitly choose to share.
A new device cannot read private history from before it joined. If all keys are lost, that private history cannot be recovered from the cloud.
A FEW GOOD QUESTIONS
Private conversations are. Everyday (standard) conversations are server-readable. Milo keeps the two modes and their histories separate, and a private conversation never silently switches to standard mode.
Yes. The repository includes the API, native client, administration interface, and Docker Compose configuration. You choose your infrastructure and connect the client to your server. Our self-hosting guide explains the setup and current release status.
Milo targets Android, Windows, macOS, and iOS. Available Android and Windows packages are listed below. macOS distribution and iOS TestFlight require additional signing setup; there is no browser client.
No. New devices must be approved and only gain access to private messages after they join that conversation. Milo does not provide cloud recovery of private history or encryption keys.
No. This website does not include analytics scripts, advertising pixels, tracking cookies, or third-party fonts. Your hosting provider may still keep ordinary server access logs.
YOUR NEXT CONVERSATION STARTS HERE
Make room for a messenger that feels a little more like you.
Android development builds have been tested. Available signed APKs are listed here after release verification.