Account and identity
Prime supports verified email sign-in and Sign in with Apple. One-time codes are delivered through Resend. Authentication tokens are stored in the iOS Keychain on the device; the server stores token hashes rather than reusable plain-text session tokens.
Never share a password or verification code. Prime Support will not ask for either one.
Messages and stored content
Connections between the app and Prime services use TLS. Online messages may pass through and remain on Prime infrastructure as needed for delivery, receipts, history synchronization, group membership, channel content, and multi-device behavior. Attachments may be stored while they are required for delivery and access.
On-device conversation data is protected by iOS application sandboxing and the security of the user’s device. A device passcode, Face ID, and current iOS version remain important parts of the security model.
Voice and video calls
Online calls use WebRTC. WebRTC encrypts media in transit using its standard DTLS-SRTP transport. Prime uses signaling infrastructure to establish calls and Cloudflare TURN when a direct media path cannot be created. TURN relays encrypted WebRTC packets; it is not a statement of end-to-end identity verification.
CallKit integrates incoming calls with iOS. PushKit may wake the app for a legitimate incoming call. Microphone and camera access are requested only when call or recording features need them.
Nearby communication
Nearby discovery uses Bluetooth and Apple peer-to-peer networking. Direct nearby messages are exchanged between devices and saved locally. Wi‑Fi should remain enabled for the higher-bandwidth peer-to-peer path even when neither device is connected to a router.
Location-based People Nearby is a separate optional feature. The server receives a recent location to calculate nearby accounts, while other users receive an approximate distance rather than your coordinates. Disable it in Privacy & Security when you do not want location-based discovery.
Permissions and device controls
Prime requests permissions only for related features: notifications for messages and calls; microphone and camera for voice, media, and calls; photos for selecting or saving media; contacts for contact discovery; Bluetooth and local network for nearby mode; and location for shared location or optional nearby people.
Review or revoke any permission in iOS Settings. Some Prime features will stop working when their permission is removed.
Security limits and reporting
No internet service can guarantee absolute security. Software bugs, compromised devices, social engineering, and third-party platform failures can still create risk. Keep Prime and iOS updated and verify unexpected requests through another channel.
To report a vulnerability, email [email protected] with clear reproduction steps. Do not access other users’ data, disrupt the service, or publish sensitive details before we can investigate.