Operalytix Features
Everything you need to talk privately.
Chats, groups, calls and files, with privacy controls that are on by default and limits that are stated plainly.
Messaging
Chats that only their members can read.
Every chat, including a one-to-one chat, is an MLS group (RFC 9420) run with a hybrid post-quantum cipher suite.
One-to-one and group chats
Groups get new keys whenever members join or leave, and the mailboxes they use change with them.
Photos, videos, voice notes and files
Attachments are encrypted with AES-256-GCM and sent in chunks of one fixed size. Images and voice notes are decrypted into memory, not written to files.
Disappearing messages
Choose a timer per chat. When it runs out, the message, its attachments and the chat’s call records are deleted from your phone. Copies others make, such as screenshots, are out of the app’s reach.
Receipts off by default
Delivery receipts are off unless you turn them on.
Message requests
A chat from someone you haven’t added waits until you accept, delete or block it. Nothing is sent to them before you accept.
Calls
Voice and video calls, private by default.
Calls are signalled inside the encrypted chat and run through a relay server for media (TURN).
Up to 4 people
One-to-one and small group calls, with voice and video.
Through Tor by default
In the default private mode, call media goes through Tor, so the TURN operator sees a Tor exit, plus the call’s timing, duration and volume.
Fast mode, if you choose it
Fast mode sends media straight to the TURN server for better quality. You turn it on after a warning, because that server’s operator then sees your IP address while a call runs.
New keys for every call
Each call gets fresh secrets, exchanged with post-quantum protection. The audio and video themselves use WebRTC’s classical encryption (AES-128). Why that matters.
Identity and contacts
You decide who can reach you.
No phone number, no e-mail and no address book upload. Contacts come only from codes you exchange.
Contact codes
Share your code from New Chat > Share My Code, or scan or paste someone else’s. There is no directory and no lookup.
Safety numbers
Compare a safety number in person or over another channel. It is how you rule out someone in the middle at first contact.
24-word recovery phrase
Your identity keys come from a phrase that is shown once and never leaves your phone. Write it down; it is the only way to restore your identity.
Optional display name
A name you choose travels in your contact code, so anyone you give the code to can see it. Inside Operalytix it is only sent end-to-end encrypted.
On your phone
Protection for the phone in your pocket.
Stored data is encrypted row by row, with a key that only this phone’s Secure Enclave can unwrap.
Face ID app lock
With the app locked, your stored history is sealed under a key that is released only after Face ID or your passcode.
App passphrase
An optional passphrase, separate from your device passcode, so knowing the passcode is not enough to open the app.
Duress code and attempt limit
An optional duress code erases everything and opens an empty app. An optional limit erases the data after 10 wrong passphrase entries.
Erase All Data
Destroys the keys that protect your data before anything else happens, so an interrupted erase still leaves nothing readable.
Notification previews off by default
Notifications don’t show message text unless you allow it, and the app removes delivered notifications when previews are not allowed.
Network
Tor built in. Relays anyone can run.
The app talks to relays only through Tor, which is built into the app. You choose the relays.
Embedded Tor
Tor (the Rust client, arti) runs inside the app, with a fresh circuit for every relay request. Bridges help where Tor is blocked.
Your choice of relays
Add relays under Settings > Relays, including onion-service relays and relays you run yourself.
Cover traffic
While the app runs it sends sealed, fixed-size requests on a schedule whether or not you are writing, so your own activity is harder to pick out.
Push, off by default
Without push, the app checks for messages when it runs. If you turn push on, notifications carry no content and no sender, and in the default private mode they arrive at random times.
Safety
Tools against spam and abuse that respect your privacy.
Everything runs on your phone. Nothing is reported automatically.
Block
From the chat menu or Group Info. Their messages, requests and calls are dropped on your phone.
Mute
A muted chat never shows message previews.
Content filter
On by default: a short built-in list of spam, scam and threat phrases plus your own words. Matches are hidden, also from notification previews.
Report
You pick the exact messages, choose a reason and review what will be sent. It goes end-to-end encrypted to the moderation contact. Attachments are never included.
Want to know exactly what each server learns?
Who learns what, in detail