PEM relays encrypted envelopes. Your keys never leave your device — our server only sees ciphertext it cannot read.
Why PEM
Every message is encrypted on your device before transmission. Our infrastructure only relays ciphertext — we have nothing to read or hand over.
Messages are automatically purged after 72 hours. No archive, no history leak — conversations disappear on schedule.
Each device publishes its own key bundle. Messages are sealed for the specific recipient device, not an account you share credentials to.
Attachments are encrypted client-side and stored as opaque blobs. Download tickets expire — no permanent public URLs.
Native mobile apps built with React Native. Fast, lightweight, and fully offline-capable for key management.
Rust backend, documented REST + WebSocket API. Auditable, self-hostable, and built without lock-in.
How it works
A one-time verification code is sent. No passwords stored on our server — your identity is verified and discarded.
A cryptographic identity bundle is created locally and published to the directory. Your private key never leaves your phone.
Messages are sealed to the recipient's public key before leaving your device. The server relays an opaque blob it cannot inspect.
All envelopes are purged from the server after 72 hours, whether delivered or not. Nothing persists.