Description
Parvaz (Persian for "flight") is a Farsi-first Android app for Iranian users that tunnels browser traffic through a Google Apps Script relay deployed and controlled by a trusted technical helper.
The app terminates TLS locally using a certificate the user installs once, then re-encapsulates HTTPS requests inside the relay's JSON protocol and forwards them through Google's infrastructure. Chrome and other Chromium-based browsers (Brave, Edge, Vivaldi) trust this certificate automatically; native apps, non-Chromium browsers, and non-HTTP protocols are out of scope by Android design.
Because the relay operator can read all tunneled traffic in plaintext, Parvaz is intended for read-only browsing of public information rather than signing in to sensitive accounts, unless the user fully trusts the operator running the relay.
Setup requires installing a certificate through Android Settings once and importing a parvaz:// access link shared by the helper. After that, one tap starts or stops the tunnel from the main screen.
Throughput is limited by the underlying Apps Script quota, and WebSockets are not supported.
What’s new (0.1.18)
The app now ships only the 64-bit ARM build, which is what every Android phone it is meant for uses. The previous release also carried an x86_64 slice that had no core engine in it, so on those rare devices the tunnel could not start.
Anti-features
Properties of this app that are worth knowing about before installing.
- NonFreeNet
Versions
Permissions
What the app asks the system for. Android only grants sensitive access after you confirm it.
- Foreground serviceKeep running in the background, visible in the status bar.
- FOREGROUND_SERVICE_SPECIAL_USE
- NotificationsShow notifications.
- Network stateCheck whether and how the device is connected.
- Internet accessSend and receive data over the internet.
- parvaz.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Comments