Features
What works in version 0.2.0-alpha.1. "Tested" means automated tests or probe scripts ran; it does not mean an outside party has reviewed it.
Messages
- One-to-one chats start with a post-quantum key exchange (X25519 plus ML-KEM-768) and continue with the Double Ratchet, so old messages stay safe if a key leaks later.
- Replies, reactions, editing and deleting your own message within 24 hours, polls, star and pin, send later, forward, select many, export a chat to a text file.
- Disappearing messages per chat.
- Message requests: strangers wait as requests, with limits. Links in a request stay hidden until you accept.
- Blocking drops a person's messages and calls before decryption, without telling them.
- Search covers chat names, message text and file names.
Files and voice messages
- Files and images are encrypted on your device with their own key and stored on the relay only as an encrypted blob (kept 14 days, 25 MB each by default).
- Voice messages up to 3 minutes, with playback at 1×, 1.5× or 2×.
Groups and channels
- Groups use MLS (RFC 9420) with the X-Wing post-quantum ciphersuite, up to 50 members. The relay needs no group logic.
- Only the creator adds members and names admins. Admins can rename the group, change its timer and ask to remove ordinary members.
- Channels are one-way groups: only the owner posts.
Calls
- One-to-one voice and video calls over WebRTC, with every audio and video frame also encrypted end to end, and keys that rotate during the call.
- Group voice calls for 2 to 10 members, video up to 4.
- Calls work across restrictive networks when the relay operator runs a TURN server.
- Call history is stored encrypted on your device.
Safety and privacy
- Safety numbers and identity-change alerts.
- App lock with a passphrase, a duress passphrase that opens an empty offline account, and a desktop panic shortcut that erases local data.
- Messages are padded to size buckets to hide small length clues.
- Optional Saivo PIN for answering calls on a locked phone and for Settings.
- No ads and no analytics.
Your data
- An encrypted copy of your account on your relay, opened only by your recovery key.
- Local encrypted backups with a recovery key.
Servers
- Use any relay. You and a contact can use different relays, like email.
- Run your own: relay or home node.
- Optional push wake-ups through UnifiedPush (a self-hostable push app such as ntfy), with no Google services.
Languages
English, Lithuanian, Norwegian (Bokmål), Ukrainian, Polish and Russian. Native speakers have not checked the translations yet.
Not there yet
iPhone, Windows and Mac apps. Calls ringing through push. Video playback inside the app. Group call history. Files in backups.