A private, self-hosted messenger. End-to-end encrypted with X3DH and the Double Ratchet — the same design family as Signal — run on infrastructure you control.
Every message, photo, video, and voice note is encrypted on-device with a Double Ratchet. The relay only ever sees ciphertext and routing metadata.
Runs on infrastructure you own. No third party ever holds your account, your contacts, or your message history.
Link a second device with a one-time QR code — your identity and conversations carry over, end-to-end encrypted in transit.
Export a passphrase-encrypted backup to iCloud Drive, Google Drive, or locally — restore it on any device.
Verify who you're really talking to by comparing a safety number out-of-band, the same trust model Signal uses.
Multiple relay instances share the same account storage and are bridged by Redis pub/sub, with durable delivery even if one goes down.
Point your device at a private relay you run yourself instead of — or alongside — the public ones. In "Both" mode your account exists on both at once, so you can still reach friends on the public relay.
Each device picks one of the public relays at random the first time it registers, and automatically fails over to the other if its connection drops — both share the same account storage, so this is seamless. A relay showing as down only affects devices currently connected to it; it does not indicate a shared outage. Anyone can also run a fully private relay instead — see "Bring your own relay" above.