Through HTTPS, end-to-end encryption. No user data, including IP address, MetaData, etc. is collected or stored. The messages are stored only until they are delivered. After delivery, they are deleted immediately. Thus, if no backup has been created, there is no possibility of recovery.