flingr

flingr provides private image and chat exchange.

When you send a chat message to a friend the message is encrypted with an encryption key.
This encryption key is negotiated by the two users independently of the flingr service so there is no way that flingr can decrypt the message (or image).
Once sent the message is deleted totally, forever from your phone.
Once collected the recipient needs to verify it is them with either their fingerprint or pin.
Once flingr is exited without a reply being sent, this copy is deleted, totally, forever.

To look at an image you have sent someone they must validate it is them with their fingerprint or pin.
To look at an image the recipient presses and holds down the flingr logo to show the image.
Once they remove their finger the image is deleted totally, forever.
flingr does not keep any record of your comment history, your images, or your metadata.