The whole messenger, none of the paperwork

Everything you expect from a modern messenger, with no account and no phone number behind it.

• Replies with a tappable quote, emoji reactions, and forwarding to any chat
• Pin messages to the top of a chat, star them into a saved-messages list
• Multi-select to copy, forward, star, pin, save or delete in one go
• In-chat search, chat folders, favorites, mute, and archive-free tidy lists
• Delete for me or delete for everyone, mirrored on the other device
• Typing indicators, read receipts, last seen and online — each switchable off

A per-chat mode, or a one-shot toggle on the composer's lock icon, for the things you do not want sitting in a chat log.

• View once: the bubble shows “Tap to view”, reveals for 5 seconds, then deletes itself on both devices
• View & keep: stays hidden behind a tap, revealed only when you want it, never auto-deleted
• The composer masks your own text a moment after you stop typing, so shoulder-surfing gets nothing
• Copy, save and forward are refused on private messages
• Per-chat disappearing timers, a prevent-copy switch, and a notice to your peer if they screenshot

Photos, video, files and voice notes travel over padded file relays that never see the content.

• Images and video with in-app viewers, plus save-to-gallery
• Any file type, chunked and padded to size buckets across relays
• Voice notes recorded and played inside the chat
• Auto-download rules per network: Wi-Fi, mobile data, roaming

Live audio and video, and a walkie-talkie style tab for people you talk to constantly.

• End-to-end encrypted 1:1 voice and video calls over WebRTC
• The Etoki tab: pair a partner from a chat invite, then hold to talk live
• Mute a single Etoki partner or all of them at once
• Calls and Etoki are refused automatically when strict-proxy mode is on — WebRTC cannot be proxied without leaking your IP

Group encryption on MLS (RFC 9420), carried over the same pairwise channels as your direct chats.

• Create groups, add and remove members, admin-gated membership
• A per-epoch verification code to confirm the group out of band
• No group server: fan-out happens over your existing encrypted connections

Several separate lives on one phone, and a way out if someone makes you unlock it.

• Multiple accounts on one device, switched instantly from Settings
• App lock with biometrics or a PIN, plus a screenshot and recents-preview block
• Panic mode: a per-profile duress PIN that wipes that profile — and any profile sharing the PIN — the moment it is entered
• Chat history in a SQLCipher database whose key is wrapped by the Android Keystore

You choose which relays carry your traffic, and how it leaves your phone.

• Manage routers, file relays and the 2-hop entry router from Settings
• A per-chat connection-flow diagram, and “change entry” to re-route a single conversation
• SOCKS5 proxies: pin one, or rotate a pool so each new connection takes the next
• Block non-proxied traffic, and resolve names over DNS-over-HTTPS instead of the OS resolver
• No FCM or APNs: a foreground service keeps queue connections live and restarts at boot

Run announcement and alert bots from the phone, against your own bot relay.

• Add a bot with its relay API URL and token, with a certificate-pinning trust prompt
• See subscribers and an updates feed of messages and connections
• Send at normal, high or critical priority — the loud ones pierce mute and are rate-limited

The small things that make it usable every day.

• Light, dark or system theme, and a language picker
• Notification delivery modes (instant, periodic, off) and a preview toggle
• Self-updating: the manifest is Ed25519-signed with a pinned key and the APK must match its digest