Messages only the two of you can read
A small, quiet place to talk with the people who matter. Messages, photos and even reactions are encrypted on your device — so the only people who can read them are the ones in the conversation.
Private by construction
Every message is encrypted on your device with a key only you and the person you are talking to can derive. What reaches our server is unreadable to us.
Attachments are sealed before upload — including the filename and file type. We store a blob we can neither open nor identify.
Push carries the same ciphertext, decrypted on your phone to show the preview. Apple and Google see that a message arrived, never what it says.
Your key can sit behind biometrics, so even someone holding your unlocked phone cannot open your messages without you.
No phone number, no email, no address-book upload. You join with an invite code and pick a username. That is the whole signup.
No advertising identifiers, no tracking SDKs, no crash reporting that phones home. Nothing about you is sold or shared.
The short technical version, for people who would rather see it than take our word for it.
Your device generates a keypair. The private half never leaves it in usable form — the backup we hold is sealed with your password, which we never see.
Your private key and your friend’s public key combine (X25519) into a shared secret that neither the server nor anyone watching the network can derive.
The message is encrypted with that secret (XSalsa20-Poly1305) and authenticated, so tampering is detected rather than quietly passed along.
Encryption gets oversold. Here is the honest edge of what it protects, so you can decide whether it fits.
Metadata is not hidden. The server has to know where to route a message, so it knows which accounts exchanged one and when — just not what it said.
Forget your password and your history is gone. Not recoverable by you, and not by us. That is the price of genuinely not holding your key.
Your device is the weak point. Encryption protects messages in transit and on our server. Someone with your unlocked phone can read what is on it — which is what the biometric lock is for.
Android now, iPhone shortly. You will need an invite from someone already using it.