Stalk
End-to-end encrypted messaging over any IM platform — WeChat, Telegram, and more.
Available on the App Store.
Features
- RSA end-to-end encryption for all messages
- Works with any IM platform — paste encrypted text anywhere
- Manage multiple contacts with individual public keys
- Automatic clipboard decryption when you switch to the app
- Fully offline — no servers, no accounts, no data collection
How It Works
- Share your public key with a contact
- They encrypt their message to you using your public key
- Copy the encrypted text into Stalk — it decrypts automatically
- Reply by encrypting your message with their public key
Support
For bug reports, feature requests, or any questions, please contact:
Email: goodspb.luo@gmail.com
Privacy Policy
Last updated: July 14, 2026
This privacy policy applies to the Stalk app for iOS and Android, developed by Malvin Lok (“we”, “us”).
Data Collection
Stalk does not collect, transmit, or share any personal data. The app has no servers, requires no account registration, and makes no network connections. Everything the app handles — your display name, avatar, contacts, public keys, your private key, and your message history — is stored locally on your device and never leaves it.
Clipboard Access
Stalk reads your clipboard when you bring the app to the foreground, solely to detect encrypted text and offer to decrypt it automatically. Clipboard content is processed entirely on your device, is never stored unless you explicitly save a decrypted message, and is never transmitted anywhere. Stalk also writes to the clipboard when you tap “Copy” — for example to copy encrypted text or your public key.
Cryptographic Keys
Your RSA key pair is generated on your device. The private key never leaves your device. You may regenerate your keys at any time from the Security tab, which permanently destroys the previous key pair.
Data Retention and Deletion
All data lives only on your device. Deleting a conversation, a contact, or the app itself permanently removes the corresponding data. We have no copy and no way to recover it.
Third-Party Services
Stalk uses no third-party analytics, advertising, or tracking SDKs.
Children
Stalk is not directed at children under 18.
Changes
If this policy changes, the updated version will be published at this page with a new “Last updated” date.
Contact
Questions about this policy: goodspb.luo@gmail.com