01 · Teams
Companies that want async without surveillance
Create an org, add colleagues, exchange even when not everyone is online. The mailbox only sees ciphertext.
The chatnobody else can read
End-to-end encrypted desktop messaging. Messages go peer to peer, no chat server that opens your conversations.
What you can do
Everything a work chat needs
From your first identity to a sealed message between colleagues, Pillow is built for teams that need to talk freely without wondering who else can read the thread.
New identity
alice
••
Create identity
✓Ready to chat
In this scene
Create identity
Register on your desktop with a username and passphrase. Your identity stays local — no cloud account owns your profile.
Why Pillow
Privacy is not optional, it is the product
End-to-end encryption
Every message is sealed for the recipient before it leaves your machine. Pillow cannot read it.
No chat server
When you are online, you talk directly (WebRTC). For async teams, only encrypted blobs move, never cleartext.
History on your device
Long conversations live in your local mailbox. You keep the memory; nobody else hosts it in the clear.
Who it is for
Concrete cases, not privacy theatre
02 · Trust
Conversations too sensitive for cloud chat
Founders, counsel, health, deals, when a Slack leak is not an option. Your peers hold the keys, not a black box.
03 · Everyday
Replace WhatsApp or Slack for real privacy
A simple desktop app: identity, contacts, messages. Less marketing noise, more control over who reads what.
Sectors
Built for work where a leak is not an option
Pillow fits teams that handle privileged, regulated, or high-stakes conversations and refuse to leave them on a readable chat server.
Legal and counsel
Protect client privilege and deal talk with end-to-end encryption and a history that stays on your devices.
Healthcare
Coordinate care and research without exposing patient details to a third-party chat cloud.
Finance and deals
Keep fundraising, M&A, and trading discussions between peers, not on an operator-readable channel.
Journalism and NGOs
Talk with sources and field teams when confidentiality is part of the mission, not a checkbox.
Public sector
Reduce the risk of sensitive coordination living in commercial SaaS inboxes you do not control.
Defence
Coordinate sensitive operations and partners with end-to-end encryption and a history that never sits readable on a shared chat server.
Industry and manufacturing
Protect plant coordination, suppliers, and trade secrets without leaving them readable on a vendor chat cloud.
Research and R&D
Keep experiments, patents, and partner labs between trusted devices, not on an operator-readable channel.
Technology and founders
Align co-founders, investors, and core staff without leaking roadmap or IP through everyday chat tools.
How it works
Three steps with zero opaque magic
- 01
Create your identity
One key, one passphrase. No central email account that owns your profile.
- 02
Add a contact
Invite or QR. You exchange public keys, the start of a private channel.
- 03
Talk P2P or async
Both online: direct WebRTC. Otherwise, encrypted org queue. Always ciphertext.
Download
Install, unlock, and write freely
Free. macOS, Windows and Linux. Pick your system, we highlight the one detected on this device.
Desktop version
Free to use. Select your OS to download Pillow.
macOS Your device
Package .dmg
Windows
Package .msi
Linux
Package .AppImage
FAQ
Common questions
Can Pillow read my messages?
No. Messages are end-to-end encrypted on your device before they leave. We never see cleartext chat content.
Is there a chat server in the middle?
Not for live conversations. When both sides are online, traffic goes peer to peer over WebRTC. For async org delivery, only encrypted blobs are stored temporarily, never readable messages.
Where is my history stored?
On your machine, in the local mailbox. Long-term conversation history is yours to keep; it is not hosted in the clear on our servers.
Which platforms are supported?
Desktop apps for macOS, Windows and Linux. Download the build that matches your system from the section above.
Is Pillow free?
Yes. The desktop messenger is free to download and use.
How do organisations message asynchronously?
Create an org, add members, and send encrypted messages into the org mailbox. Recipients decrypt locally when they come online, the mailbox never sees plaintext.