Kryfo

A private messenger. No phone number, no email, no account. You are a key
pair generated on your device. On the default route, nobody, including us,
can tie your chats to a real identity, and no one can look you up unless
you claim a public handle.

By default everything travels over Tor. Content is end to end encrypted with
the Signal protocol. Messages travel through relays, sealed so no relay can
read them, and on the default route the relays never learn your IP address
or who you are. No address book upload, ever.

Features:

* Works where Tor is blocked: Kryfo finds a way around it by itself
* Delivery through Nostr relays, so messages reach a phone that was offline
* Groups with photos, files, voice messages, replies, reactions, pins and polls
* Animated stickers that travel as a name, so no picture leaves the phone
* Search across all your chats, kept in the encrypted database
* Timed messages that burn after a set time
* Encrypted local database and encrypted backups
* App lock with PIN or biometrics, a decoy PIN that opens an empty Kryfo, and hidden chats behind a PIN of their own
* Panic wipe that removes everything, including media on disk
* A chat with the person who builds Kryfo, anonymous if you like
* 15 languages
* No analytics or telemetry

Funding: no ads, no investors. It runs on what backers give. Backing is
optional and anonymous, and every feature works the same either way.

New: albums, send any kind of file, export your notes, accent colours, and screenshot blocking per chat that holds on both phones.

Safer: every message is padded to a few fixed sizes, and "This isn't them" when safety numbers don't match.

Fixed: GIFs line up on the right, Tor's status reads in the light theme, and sheets stay above the keyboard.