Android warns me about installing this. Is that normal?
Yes. Android shows a caution for any app installed outside the Play Store, it's a generic warning, not a verdict on WingPost. You can verify the file's signature, and the install asks for nothing unusual. That direct-install path is exactly how we avoid store gatekeeping and identity binding.
My notifications aren't arriving
Three things to check: (1) grant the app notification permission in Android settings; (2) turn off battery optimization for WingPost so the system doesn't sleep it; (3) if you chose a strict, no-push mode, notifications are intentionally off, re-enable push in the app's settings to get instant alerts back.
I lost my phone, can I recover my account?
Only from a backup you made yourself. There's no server-side recovery loop, on purpose, a recovery loop would also be a way in for an attacker. If you exported an encrypted session backup, restore from that. If you didn't, the account effectively ends with the device. That's the cost of having no copy of your data on our side.
How do I add someone?
Share your node ID with them (or scan a QR code in person), and they add it on their side. No phone numbers to exchange, no contact-list upload, just the ID you choose to give out.
How do I know a contact is really them?
Mark a contact as verified once you've confirmed their identity, the verified pill is the real authenticity signal. A matching ID alone is a convenience; the verification step is what tells you the person on the other end is who you think.
Is my chat history backed up anywhere?
Not on our servers, we keep no readable copy. Your history lives on your device. Use the in-app encrypted session export to keep a backup in storage you control, so a new phone can pick up where the old one left off.
How do I delete my account?
From inside the app, it's a true deletion, not a hidden flag. Once done, there's nothing left on our side tied to that identity.