What talk can do
Messaging where the server carries without ever reading, backed by an identity that stays yours.
End-to-end encryption
X3DH then Double Ratchet (P-256, HKDF, HMAC, AES-GCM). Two concrete guarantees follow: a key compromised today decrypts neither past messages nor future ones. Ratchet state lives entirely in your browser; the server only ever stores opaque blobs.
- Forward secrecy and post-compromise security
- Ephemeral messages, purged after 24 hours
- Per-conversation disappearing timer, down to 5 minutes
- Read-once messages, deleted from the server once revealed
Check you are talking to the right person
A 60-digit safety number, derived from both identity keys, can be read out loud or scanned as a QR code. If your contact’s key changes, the badge says so instead of letting it slide silently.
Groups and attachments
Group conversations use sender keys, with every message signed (ECDSA P-256) to prevent forgery. The key travels over the Double Ratchet channel and rotates when a member is removed. The server only knows who belongs to the group.
- Images, files and voice notes encrypted client-side
- A random AES key per file
- Same expiry rules as messages
Voice and video calls
Calls are peer-to-peer (WebRTC): audio and video flow straight from one browser to the other and never cross the server, which only relays signalling — itself end-to-end encrypted.
Calendar, availability and meetings
Set availability day by day, with a general rule and exceptions, in fifteen-minute, half-hour or hourly slots. A visitor picks a free slot and leaves a request for you to accept or decline.
Relationships and visibility
The relationship graph is browsable up to three degrees, showing who the connection runs through. Every attribute on your card carries its own level — public, reciprocal contacts only, or private — enforced server-side and not merely hidden on screen.
Your keys follow you
Your private key is backed up encrypted on the server, unlocked by passphrase or passkey (PRF) — never readable by the server. It restores identically on another device, and history stays readable after rotation.
Real time and languages
New messages and notifications arrive live over an SSE stream, with no page refresh. The interface is translated into seven languages: French, English, Spanish, German, Italian, Portuguese and Dutch.