The full catalog. Chips show which plan a feature lives in — during open beta, everything is unlocked for everyone. Safety features are free on every plan, permanently.
Your identity is an Ed25519 keypair derived from a 12-word phrase. No phone number, no email, no OTP — there is nothing to leak, subpoena or sell.
Add contacts by QR scan or Account ID, always mutually. No global directory, no discovery by number, no strangers sliding in.
Twelve words restore your identity on a new phone. We can't reset it for you — that's the point.
1:1 messages sealed with X3DH + Double Ratchet. React, reply, forward, edit, unsend, delete for everyone.
Per-chat timers from seconds to a week. View-once text & photos that reveal, then burn. (View-once is a Premium power at launch.)
Animated GIFs from your own gallery and bundled brand sticker packs — no Giphy, no Tenor, no third-party catalog watching what you pick.
Hold, speak, send — sealed like everything else.
See who's online and when your message was read — presence you control, both ways.
24-hour stories with view receipts, end-to-end encrypted to each contact.
Encrypted chat export, plus optional zero-knowledge backup sealed with your recovery phrase.
A group message is sealed separately for every member and travels as ordinary one-to-one traffic. The relay never learns that a group exists, who belongs to it, or who runs it — there is no group object on any server of ours.
Add, remove, rename, promote — every membership change is signed by the admin who made it and verified on each device before it is believed. Nobody can forge their way into a room or quietly remove someone from one.
The instant a member leaves or is removed, every other device stops accepting their messages. Enforced by the members themselves, not by trusting a server to stop delivering.
If the last admin leaves, the longest-standing member is promoted automatically inside the same signed update — so a group can never be stranded without anyone able to run it.
Photos, video, voice notes, files, locations, reactions, replies, edits, delete-for-everyone, polls, pinned messages and disappearing timers — all work in groups exactly as they do in a private chat.
Anyone can start one and the rest hop in. Every participant connects directly to every other, so no server holds the roster — comfortable up to 8 on audio and 4 on video, which is the honest limit of doing it without a middleman.
Full media and any document, sealed per-blob with fresh keys; ciphertext at rest on your device and in transit.
End-to-end encrypted calls that connect through strict networks (TURN over TLS on port 443) and ring properly on locked phones.
Request money in the chat; they pay in their own UPI app. We are never in the money flow — no license, no fees, no financial data. International methods as we expand.
Share where you are as a sealed message — never as live tracking we could observe.
Optional warnings that blur abusive content until you choose to see it, plus a think-twice nudge before sending. Runs 100% on your phone — nothing leaves it.
Message franking lets you report abuse in a way we can cryptographically verify — without the ability to read anything else.
Block capture on Android, detect and notify on iPhone — governed by the sender.
Biometric or PIN gate over the whole app. Safety is never paywalled.
Full block is free for everyone; Pro splits it — mute messages, audio or video independently.
Choose which of react / reply / forward ride your message bubbles inline.
Hide your identity when calling, or hide the caller's on your screen.
Link a second device with its own encryption session; chats self-sync, sealed end-to-end — phone or desktop, one identity.
A native desktop app: two-pane layout, menu-bar presence, close-to-tray, native notification banners, and full audio/video calls. Linked by QR in seconds; Windows & Linux follow from the same codebase.
SQLCipher database and sealed media blobs — a stolen phone without your unlock gives up nothing readable.
Pushes carry zero content — Google and Apple relay a nudge, never your words.
Hybrid ML-KEM-768 (FIPS 203) alongside classical X3DH, so both must break for your messages to. Self-verified against NIST test vectors on-device at every launch.
Our own servers in Europe and India; the app races every route and connects through whichever answers first.
A build with a known security flaw is refused by the relay — everyone moves forward together.
The full side-by-side matrix lives on the plans page.
Compare plans →