From a private messenger to communities, phone protection and company servers
Each step builds on the last: one cryptography, one design, one codebase. We don’t promise dates — here is what already works and what we are building.
- 01In the appMessengerAndroid and iPhone, post-quantum encryption, calls, Tor
- 02Next updateCommunitiesChannels and communities where readers are protected by pseudonyms
- 03PlannedSpyware CheckOne button in Profile finds spyware
- 04PlannedUmbera for desktopmacOS, Windows and Linux
- 05PlannedUmbera BusinessA messenger on the company’s own server
Messenger
No phone number, no email. The server doesn’t know who sent a message, who received it, or what it says. Already on Google Play and the App Store.
Sign up in a minute. Just a username and password. A 12-word recovery key stays with you, not on a server.
You decide who can message you. A new person sends a request first — you accept, decline or block.
The server works blind. X25519 + ML-KEM-1024, the sender sealed inside the ciphertext, groups on MLS.
Only the participants hear a call. Keys stay on the phones, the relay forwards only ciphertext, Tor is one switch away.
- 1000
- concurrent users on one server — 0 losses, 20 ms latency
- 800+
- concurrent call streams on a single relay
- 2
- stores: Google Play and the App Store
Communities
Channels and communities where nobody can see who runs a channel or who follows it. Public channels have no follower limit; private, end-to-end encrypted channels hold up to 5,000 members.
A separate pseudonym in every channel. Comments across channels can’t be combined into one profile. A nickname only if you choose, and only for one comment.
Admins see a pseudonym, not your account. A request to join a private channel comes from a pseudonym with a message.
Four access types. Public, private by request, private by link, and community, where every member can post. Roles: owner, admin, author.
Free of drug dealers and scammers. Filters, reports, re-uploads of removed files blocked, sanctions with the right to appeal. Nobody scans private channels.
Stats without tracking. Rounded totals only; groups under 10 are hidden. Metadata is stripped from photos and files.
4 languages. English, Russian, German, Italian; dark and light themes.
Spyware Check
One button in Profile tells you whether someone is spying on your phone — and exactly which app is doing it. On-device, offline, no data collection.
Android — 8 checks. Accessibility, notification readers, device admins, third-party keyboards, certificates, VPN and proxy, ADB and root, sideloaded installs.
The spyware’s name. Matched against the open Coalition Against Stalkerware database.
iPhone — honest and practical. Apple doesn’t let apps see other apps, so we check screen recording, proxy and VPN, and signs of jailbreak — and point you to Safety Check, Lockdown Mode and iCloud protection.
Removal wizard. Step by step: revoke accessibility and admin rights, uninstall. Results stay on the phone.
Umbera for desktop
The same messenger on your computer — with its own keys, not a copy of your phone’s keys.
macOS, Windows, Linux. Apple Silicon and Intel, a signed installer, .deb · .rpm · AppImage.
QR linking from the phone. The computer has its own keys.
Files of any size. Encrypted, with resumable transfers.
History moves with you when you switch phones. Local storage is encrypted, and Tor works just like on the phone.
Umbera Business
A secure messenger for companies, deployed on their own servers. Not a single message or file leaves the company — not even to us.
One-command install. Its own backend, database, file storage and call relay.
The license is checked offline. The client can cut the server off the internet and capture its traffic — not a single packet leaves.
Employees log in with a QR code. Access is bound to the device and revoked when someone leaves.
Only for legal entities. Under contract and with client vetting. Pricing and terms — later.
What we don’t promise
“100% protection”. We only claim what can be verified: the code, the tests and the traffic analysis are public.
Dates. A step ships when it passes review, not to meet a deadline.
Anything that isn’t in the code. If the plan changes, we update this page.
Start with the messenger
Communities arrive in the same app as a regular update.