Queso Privacy Policy

Last updated 2 October 2026

Queso is a multi-network messenger that translates your conversations into your language. This policy explains what Queso does and does not do with your data. In short: Queso is built so that as little of your data leaves your device as possible, and so that we cannot read your messages or identify you.

The short version

  • On-device translation never sends your messages anywhere — it runs entirely on your iPhone.
  • AI translation sends only the text to be translated to OpenAI, with no information about who you are.
  • Our gateway is zero-knowledge: it keeps no logs of your message content and cannot tell who you are.
  • We do not sell your data, show you ads, or track you across apps or websites.

Information we collect

Queso has no accounts with us and no analytics or advertising SDKs. We do not collect your name, email, contacts, or location on our servers. The only data that leaves your device to a party who can read it is:

  • Message text you choose to translate with an AI option — sent to OpenAI solely to perform the translation, and tied to no identifier about you (see below). If you only use on-device translation, no message content ever leaves your phone.

Diagnostic reports (crashes and out-of-memory events) are collected by iOS and shown to you inside the app; they are not uploaded to us.

How your messages are translated

You choose how translation works, trading privacy against quality, and you can switch anytime:

On-device (Apple) — most private. Runs entirely on your iPhone using Apple's built-in translation. Nothing ever leaves your device. Free.

Your own OpenAI key — private + AI. AI translation that goes directly from your phone to your own OpenAI account using your key. Queso never sees your key or your messages. Your key is stored only in your device's Keychain and is only ever sent to OpenAI.

Queso AI gateway — best quality. AI translation via Queso's gateway, so you don't need your own key. Your message text is relayed to OpenAI to translate it.

How the Queso gateway handles data

When you use the Queso AI gateway, a request carries only the text to be translated and a short-lived, random access token — no name, @handle, Queso ID, phone number, or device identifier. The token proves the request comes from a genuine copy of the Queso app (using Apple's App Attest) without telling us who you are, and it is not stored against any identity.

  • We keep no logs of your message content.
  • We cannot identify who you are from a translation request.
  • All traffic is encrypted in transit (HTTPS/TLS).

About OpenAI

To translate text, the translation engine has to be able to read it, so for the two AI options your message text is sent to OpenAI. Per OpenAI's API terms, this data is not used to train their models and is retained only briefly for abuse monitoring before being deleted. If you want zero data to leave your phone at all, use the on-device option. OpenAI's handling of this data is governed by its own privacy policy.

Your linked messaging accounts

Queso lets you link accounts such as WhatsApp and Telegram. These connections run on your device, directly between your phone and those services — Queso's servers are not in the middle and we do not receive or store your messages, contacts, or phone number from them. Your use of those services remains governed by their own terms and privacy policies. Account credentials and keys are stored only in your device's Keychain.

The Queso Network and nearby messaging

Messages you send over the Queso Network are end-to-end encrypted (using the Double Ratchet protocol); our relay cannot read them and keeps no record of their content. "Nearby" messaging connects directly to other nearby devices over the local network or Bluetooth and does not route through our servers.

Purchases

Queso Pro is sold through Apple's In-App Purchase. Apple processes the payment; Queso does not receive or store your payment details. Purchase handling is governed by Apple's privacy policy.

Data retention

We do not retain your message content. Text sent to the Queso gateway is processed in memory to perform the translation and is not logged; OpenAI retains it only briefly for abuse monitoring as described above. Data stored on your device (messages, keys, settings) stays on your device and is removed when you delete the app.

Security

Queso uses end-to-end encryption for the Queso Network, standard transport encryption (HTTPS/TLS) for all server traffic, and Apple App Attest to ensure only genuine copies of the app can use the gateway. Keys and credentials are stored in the iOS Keychain with device-only protection. Learn more on our security page.

Children

Queso is not directed to children under 13, and we do not knowingly collect personal information from them.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above.

Contact

Questions about this policy? Contact us at [email protected].