How we protect your privacy

You're using Lasso to discuss the most consequential decisions of your life with someone you're still learning to trust. You deserve to know exactly how we handle what you share — including where our protections end. Most platforms won't tell you that second part. We will.

Your messages

When you send a message, it is encrypted on your device before it ever reaches us. The key that unlocks it never leaves your device. We store only the scrambled text, and we hold no key that can turn it back into words.

What this reliably protects you from:

• A breach of our database — an attacker gets scrambled text, not conversations.
• A curious or rogue employee — there is nothing readable for them to look at.
• A subpoena of our servers — we cannot produce message content we have no key to decrypt.

The honest limit

Lasso is a website. Every time you open it, your browser downloads our code to run the encryption. That means you are trusting us to send you honest code — and a company that can send code is, in principle, a company that could be compelled or compromised into sending code that behaves differently. This is the fundamental limit of encryption delivered through a web browser, and it is why we do not claim to be equivalent to a dedicated encrypted-messaging app like Signal, whose app you install and whose code is independently reviewed.

We're telling you this because a privacy promise you can't verify isn't worth much. Here's how you can verify ours.

Verify it yourself

Every conversation shows a safety number — a short list of digits. Read it aloud to your match on a call or in person. If your two lists match, no one, including us, is sitting in the middle re-encrypting your conversation. If they don't match, stop sharing anything sensitive and report it. This is the same technique used by the encrypted apps you may already know.

The one exception, controlled by you

The only way a message becomes readable to our safety team is if you choose to attach it as evidence when reporting someone. That decrypts on your device, with your consent, for that report only. We can never reach into a conversation and read it ourselves.

Everything else

Beyond messages: all data is encrypted in transit (TLS) and at rest. Access to your profile, Blueprint, and matches is enforced at the database level, not just in our app. We collect only step-level usage analytics (never your answers, messages, or photos), delete raw analytics after 12 months, and never sell your data or use it for advertising. You can export or permanently delete everything from your Account page.

What we're doing next

Before we open Lasso widely, an independent security firm is reviewing our code and our encryption. We're also strengthening our encryption over time — including toward protections that survive a stolen key — and we'll update this page honestly as that work lands. If you ever have a security concern, email hi@tandemcg.com.