WingPost
Private Messenger · by AnA Devyra
Kyber-1024 · Post-Quantum · Sovereign Roadmap

Private by design.

WingPost by AnA Devyra, post-quantum encrypted messaging built for people who don't want a profile. No phone number. No email. Just a node ID and conversations no one, not even us, can read. With Stories, voice transcribe + translate, encrypted groups, and smart replies, all sealed end-to-end on your device.

End-to-end encrypted Zero metadata Direct APK · no store On-device ML
Get WingPost for Android

Direct APK, hosted on GitHub Releases. Install in under a minute. Works on any device running Android 8.0 or later.

Version
2.40.727
Android
8.0+
Size
110 MB
Download APK
New phones · GitHub Releases · Updated 2026-08-27
On an older phone? Get the lighter build (105 MB) ↓
we're on desktop too
Open WingPost on your computer
Links to the app on your phone, it isn't a separate sign-up. Install first, then scan once from Settings.
Android may warn about installing from outside an app store, tap Install anyway and grant Allow from this source once. The APK is signed; you can verify its SHA-256 checksum on the download page.
1024
Bit Kyber Key
0
Server Plaintext
250+
Shipped Features
B2B
Enterprise Ready
What's new

Recently shipped.

WingPost moves fast. Everything below is already shipped and running on real phones, not a roadmap promise.

Live in 2.40.727
Messaging

Rich text, tables and documents

A real block editor inside a chat, headings, lists and spreadsheet-style tables you can fill in and send. Works on the phone and in the browser.

Time Machine

Replay a whole conversation

Play a chat back like a film, with music, speed controls and an automatic highlights reel of your best moments together.

Safety

Scam and phishing guard

Every link is checked on your own phone before you tap it, and anything risky gets a clear warning first. The check never leaves your device.

Groups

Polls with live voting

Ask the group a question and watch the votes land in real time. Works one-to-one too, for when two people can't decide.

Calls

Missed calls survive being offline

If your phone was off or unreachable, the missed call is still waiting for you when you come back, even with push notifications fully switched off.

Calls

Turn a voice call into video

Ask mid-call, they accept, the camera opens. No hanging up and calling back.

Language

The whole app speaks four languages

English, Russian, Hindi and Spanish, the entire interface rather than a bolted-on translation layer.

Media

Standard or HD, your choice

Decide per send whether a photo or video goes light and fast, or full quality. No guessing what the app did to your picture.

Messaging

Edit a message after sending

Fix the typo instead of living with it. The message shows honestly that it was edited.

Messaging

Star anything, act in bulk

Bookmark the messages that matter, then multi-select to forward, copy, star or delete a whole batch in one sweep.

Messaging

Remind me about this

Tap a message and have the app nudge you about it later, so a promise doesn't scroll away and disappear.

By design

Rooms stay small on purpose

Groups cap at 30 and channels at 50. A room never outgrows the people who can keep it accountable, and that limit is a feature, not a stage we grew out of.

Media

Handwritten sketch notes

Draw or hand-write on a blank canvas and send it as a picture, for the things that are faster drawn than typed.

Privacy

GIF search that watches nobody

Search for a GIF without the GIF provider ever seeing your search terms or your IP address.

Notifications

Notification profiles

Silent, important-only, or everything. Keep an allowlist of people who can always reach you, and give them their own sound.

Assistant

Strong passwords, made on your phone

Ask the assistant for a password and it is generated on the device itself. Never stored, never sent anywhere.

Small things

One-tap code copy

A message containing a login code gets a copy button, so you stop fighting with text selection at the worst possible moment.

The feeling of a message no one else will ever read.

Open the app. Pick a contact. Type. Hit send. The bytes that leave your phone are sealed with post-quantum keys and a fresh ratchet, and on the other side, your friend gets a clear, untouched message. Nothing in between can read it.

Sealed before it leaves Server is blind On-device crypto only
Inside the app

Real screens, real build.

Every picture below is a real screenshot off a real phone — nothing mocked up, nothing drawn in a design tool. The only thing retouched is the account codes, because a code that is unused today can belong to a real person tomorrow.

Shot on 2.40.649
WingPost chat list with a post-quantum secured link indicator
Your chatsEvery conversation carries its own post-quantum key, and the header tells you the link is live before you type a word.
The WingPost contacts tab, with account codes pixelated
Your people, your codesAdd someone by their WingPost code or by scanning their QR. There is no phone number to hand out and no address book to upload.
A group chat containing a filled-in table and a checklist
Write like a documentHeadings, checklists and fill-in tables, sent straight into a group chat instead of a separate app.
A group's details sheet showing members and its invite code
Run the groupMembers, notifications and a six-digit invite code to hand out. Nobody needs your number to join.
The full reaction picker open over a conversation
React with anythingThe quick tray for the ones you use most, the full picker one tap further.
Long-press menu on a message with a quick emoji tray above it
Hold a messageA quick emoji tray on top, and underneath it everything the message can do — reply, edit, forward, star, or remind you about it later.
Suggested replies offered above the message composer
Replies that never leave the phoneSuggested answers are worked out on your own device, so the thing that reads your chat is your chat app.
WingPost's built-in private keyboard with shuffled key positions
Our own keyboardNo other keyboard app can see what you type. Turn on Maximum-Privacy and the keys land somewhere new every time it opens.
On-device translation panel offering ten languages
Translate in placeTen languages, handled on the phone, so a private message is never posted off to a translation service.
Aria, the in-app assistant, marked on-device and private
Aria, on your deviceAn assistant that runs on the phone itself rather than in somebody's data centre.
Chat menu showing Catch me up, Time Machine and Disappearing Messages
Catch up in secondsSummarise what you missed, replay the whole conversation like a film, or set it to disappear behind you.
Long-press menu offering pin, archive, lock, hide and mute for a chat
Lock it, hide it, archive itAny chat can be pinned, muted, locked behind your fingerprint, or taken off the list entirely.
Privacy settings for last seen, read receipts and typing indicators
Privacy you actually controlLast seen, read receipts and the typing indicator are yours to switch off, one by one.
Security screen listing the encryption in use, with identifiers pixelated
Post-quantum by defaultML-KEM-1024 and AES-256-GCM protect every message from the first one. There is no setting to remember.
An announcement channel inside WingPost
Channels and groupsReach a whole audience, with the same encryption a one-to-one chat gets.
Companion · Web

WingPost, now in your browser.

Open your conversations on any computer. Scan a one-time code with your phone to link the browser, and your chats and media appear on the big screen, still sealed end-to-end. Your phone stays the only key holder, the web app is a live, encrypted mirror that closes the moment your phone goes offline. Nothing is ever stored in the browser.

Encrypted mirror Phone holds the key Nothing stored in browser
Open the web app
web.anadevyra.com
Best in a modern desktop browser. Link it once from Settings on your phone.
Capabilities · Latest

A real messenger, sealed all the way down.

Post-quantum crypto, on-device intelligence, and the everyday features people actually use, Stories, voice transcribe, smart replies, encrypted groups, channels, calls and true end-to-end media. Sealed before they leave your phone.

Cryptography
Kyber-1024 Post-Quantum
ML-KEM-1024 key exchange, NIST-standardized. AES-256-GCM payload. Built to outlive quantum.
Double Ratchet Forward Secrecy
Every message gets a fresh ephemeral key. Compromise one, exactly one, message. Nothing before, nothing after.
True End-to-End Media
Photos, video, voice notes and files are encrypted on your device with a unique per-file key before they ever leave it. The server only ever holds bytes it cannot read, your media is as private as your words.
Verified Contacts ✓
Compare a 60-character safety number by eye, or just scan each other's QR. Verify a contact once, the ✓ pill follows them through every chat, header, and contact list.
Identity
No Phone Number
Sign up with a node ID, a cryptographic identifier you control. Your number stays your number.
No Email Required
No inbox to compromise, no recovery loop to phish. Lose your device, lose the account, that's the point.
Decoy Mode
A second PIN reveals a separate, innocuous account. Plausible deniability, built in.
Ghost Mode
Hide your presence entirely, last-seen, online dot, typing indicator, read receipts. You see them; they don't see you.
Private Keyboard
An optional keyboard built right inside the app, so no third-party keyboard ever sees a word before our encryption does. Type, switch languages, dictate by voice and translate inline, every keystroke stays on your device.
Panic Mode
One trigger and the real account wipes, keys, messages, contacts, gone in seconds. Restore later from a backup, or don't.
Hidden Chats
PIN-locked chats disappear from your main list behind a disguise name you choose, and auto-relock the moment you leave the app. A snooper never learns the vault is even there.
Burner Identities
Spin up a short-lived throwaway identity for one conversation, then burn it, wiped from your phone, removed server-side, and erased from your contact's device too.
Profile Bio & Links
Add a bio and your links to your profile, with an audience picker that decides exactly which contacts are allowed to see them.
Last-Seen Control
Accurate last-seen presence stamped by the server, and Ghost Mode turns it fully off the instant you want to vanish.
Conversations
Stories ✨
24-hour Stories with 10 gradient backgrounds, emoji reactions, viewer stats, and per-contact privacy. Same E2E pipeline as DMs, the server is blind.
Voice Notes + Transcribe
Record, send, transcribe on-device with one tap. Translate to 17+ languages (including Hindi, Russian, Spanish, Arabic) all locally. Audio never leaves the encrypted envelope.
Smart Replies
Multilingual ML Kit suggestions appear over the composer for fresh messages and pop on tap for any older one. Inference 100% on-device, your text never leaves the phone.
Rich Text Formatting
Bold, italic, underline, strikethrough, monospace code, block-quotes and links, applied right from the selection toolbar. Styles attach to your words, never as stray symbols left in the message.
Send Effects
Celebration overlays (confetti, hearts, fireworks) triggered by phrases or sent on-demand. Pure on-device animation; nothing extra goes through the server.
Vanish Mode
Disappearing messages with per-thread timers. They go, from both phones, and from the server too.
Encrypted Groups
Group chats with sender authentication, per-participant ratchets, in-group voice transcribe + translate, and send effects for everyone.
Special Days
Birthdays, anniversaries, festivals, track the dates that matter and get a private nudge in the morning. Wishes broadcast E2E, server never sees the occasion.
Burner Messages
Send a text message sealed with a burn timer, pick the seconds, minutes or hours it lives after the receiver opens it. Choose trace (leaves a faint 🔥 marker after burn) or no-trace (vanishes as if the message never existed). Works in 1-to-1 and groups.
Stealth Messages
Sender hides the content behind a tap-to-reveal blur. The bubble shows nothing, even on a glance at the lock screen.
Time-Lock Seal
Write today, deliver later. The bubble shows as sealed until the unlock time you pick, even the receiver can't peek before then.
Saved Messages
A private notes-to-self channel built right into your chat list. Drop links, photos, audio thoughts, encrypted, on-device, off the cloud.
Delete: No Trace
Pull a message back so completely it leaves no "this message was deleted" note. It vanishes on both sides as if it was never sent, the rare delete that leaves nothing behind.
Pinned Messages
Pin the messages, chats and contacts that matter most so they stay right at the top, always within reach.
Live Translation
Translate a whole conversation, or set per-contact auto-translate, across 17+ languages, all on-device, with no message ever sent to the cloud.
Channels
Encrypted Channels
Broadcast to a crowd the private way. Channels fan out end-to-end to every subscriber, so the server never reads a post. Join by code, QR, or search by name.
Roles & Moderation
Owners and moderators with fine-grained control, add or remove members, promote, mute or kick, and gate exactly who is allowed to post.
Threaded Comments
Subscribers reply under any post in clean threads (with reactions, translation, read-aloud and self-destruct timers) so the whole conversation stays neatly organised.
Join Requests & Approval
Run it open, request-to-join with owner approval, or discoverable and searchable. Owners get a live alert and one-tap review for every pending request.
Likes & Views
Posts show aggregate like and view counts everyone can see, while who reacted or watched always stays private.
Media
Encrypted Profile Photos
Even profile photos are encrypted on your device and sync privately to your contacts, the server holds a picture it can never open.
Round Video Notes
Send quick circular video notes straight from the camera, with a one-time-view option that plays exactly once, then burns.
View-Once Media
Share a photo or video that opens a single time and is gone, no save, no second look.
Media Spoilers
Hide a photo or video behind a tap-to-reveal blur, so a glance over your shoulder shows nothing until you choose to look.
Photo Editor
Draw, add text and crop before you send, a built-in editor right in the caption preview, flattened and encrypted like any other photo.
Photo Albums
Send a whole set of photos and videos as one tidy album in a single bubble. Swipe through the grid, caption the group, every frame sealed with its own key before it leaves your phone.
Live Wallpapers
Dress your chats in a living backdrop, gentle animated scenes and gradients that breathe behind your messages. Pick one in Settings and it covers every chat edge to edge, all rendered on-device. Freeze the motion any time.
Redesigned Photo Viewer
A full-screen media viewer rebuilt from the ground up, fluid pinch-zoom, swipe between every shot in the chat, and quick actions right under your thumb.
Calls
Encrypted Voice Calls
WebRTC with DTLS-SRTP. End-to-end encrypted, with a TURN fallback for restrictive networks.
Encrypted Video Calls
Face-to-face that nobody intercepts. Same crypto stack as voice, no compromise for video.
Group Voice Calls
Host group voice calls carried over the same WebRTC DTLS-SRTP encryption as 1-to-1 calls, live roster, per-person status, and join straight from the banner with one tap.
Power user
Chat Folders
Custom folders organize chats, work, family, private. Switch with a swipe; never lose a thread to the scroll.
Passcode per Chat
Lock individual chats with their own PIN. Even someone with your phone unlocked can't open them.
Photo OCR
Extract text from any received image, on-device. Copy a phone number, an address, a code without re-typing.
Global Regex Search
Power-user toggle: search across every chat with regular expressions. Local, indexed, instant.
Scheduled Messages
Write today, deliver at 6 AM tomorrow, or every Monday at 9. One-time, daily, or weekly recurrence. The phone holds it locally until it fires.
Quiet Hours
Set a daily start + end and notifications stay silent in between. Auto-resume the next morning. Per-contact muting layers on top.
On-Device Assistant
A warm personal assistant and "While you were away" recap that answers questions and sums up what you missed, running entirely on your phone, with no cloud and no network.
Family Vault
A private, on-device encrypted locker and shared credential store for your most trusted circle.
Sticker Studio
Create and import your own sticker packs, alongside hand-painted festival, regional and traditional packs built right in.
Cross-Chat File Search
Find any file across every chat (by name, caption, on-device OCR text, or even voice-note transcript) with a files-only filter a tap away.
Infrastructure
Business · Enterprise hosting
Need a private deployment for your team? A dedicated, hardened relay on your own domain, same encryption stack, isolated from the public network. See how it works →
Zero Metadata
No access logs. Ephemeral system logs. Comprehensive auto-cleanup across every server surface, nothing useful sticks around.
Stealth Tunnel
Cover traffic and adaptive privacy patterns that blur the shape of your conversations.
In-App Browser
Open links inside a private, skin-aware browser (progress, lock and share controls included) without ever leaving the app.
Link Previews
Rich link cards are fetched locally through our privacy proxy, so the metadata never travels between you and your contact, and the linked site only ever sees the server.
Architecture

How it works.

Three layers between you and a watcher. Each one ends in failure for the watcher.

01
Keys live on your device
Your phone generates an ML-KEM-1024 keypair the first time you launch the app. The private key never leaves the device. Servers only ever see ciphertext.
02
Sealed in transit
Every message is wrapped in a fresh Double Ratchet key, then AES-256-GCM. Compromise one key and you compromise exactly one message, nothing before, nothing after.
03
Decrypted on the other phone
Only the recipient's device holds the matching private key. We can't decrypt. We don't keep metadata logs. There's nothing to subpoena, leak, or sell.
On the way

What's coming to the app.

The chat, calls, channels and Stories you have today are just the start. Here's what we're building next, privacy-first, every step.

Next up
Multi-device sync
Use one account across more than a single device (phone, tablet and beyond) kept perfectly in step over an end-to-end encrypted channel. Your keys never leave your hands.
  • End-to-end encrypted device-to-device sync
  • No plaintext ever parked on a server
  • One identity, every device you own
In the lab
LAN P2P & mesh routing
Chats that hop straight device-to-device on the same Wi-Fi, and across nearby installs, without a server in the middle. Less infrastructure, more privacy, even on hostile networks.
  • Same-Wi-Fi peer-to-peer delivery
  • Mesh relay across nearby devices
  • Keeps working when the network is limited
Planned
One-tap on Google Play
A Play Store listing for effortless install and automatic updates, the exact same privacy-first build, with zero analytics SDKs bolted on. The direct APK stays available, always.
  • One-tap install and auto-updates
  • Identical no-tracking build
  • Direct APK never goes away
Server roadmap

A global multi-region network.

Live in Mumbai today, with a Switzerland-anchored future and regional subservers close to every user. A clear path, built region by region.

Now · live
Mumbai: first region live
Our production region runs on GCP Mumbai behind a custom api.anadevyra.com domain, low latency across India and Asia, reachable worldwide, hardened and monitored every day.
  • Ephemeral system logs · no access retention
  • Let's Encrypt TLS on an independent domain we own
  • Comprehensive auto-cleanup across every server surface
Next
Switzerland: new primary
Bring up a Switzerland region as the new primary, with cross-region replication of the vault, pending queue and identity directory, and health-checked failover at the discovery layer.
  • No APK push needed, the app finds the new primary on its own
  • Mumbai stays online as a regional subserver
  • Anchored in Switzerland's strong privacy tradition
Then
Global subserver network
Grow regional subservers close to users, all anchored on the Swiss primary, with enterprise partners able to run dedicated regional relays for their own organisations.
  • Enterprise-region deployments scoped per partner
  • Discovery layer routes each app to its nearest healthy region
  • Resilience by topology, not by any single provider
Privacy posture

Honest about what the server sees.

No "trust us" copy. Here's exactly what the server can and can't see, and what survives a subpoena.

Server can see

  • Encrypted bytes for delivery, never plaintext
  • A short queue of pending recipient IDs, never content
  • Ephemeral system logs that aren't retained

Server can't see

  • Your messages, sealed before they leave your phone
  • Your contacts, no contact list lives server-side
  • Your name, phone, email, we never asked

What a data request would find

  • Nothing useful, encrypted bytes are unrecoverable without the recipient's private key
  • No identity bound to any account
  • No retained access logs to correlate against

Read the full security model →

how we stack up

Why it's different.

Same encryption strength as the best privacy apps, and less identity exposure than any of them.

WingPost Mainstream messengers Privacy-focused apps
No phone number required✓✗✗
No email required✓varies✓
End-to-end encryption (default)✓varies✓
Post-quantum (Kyber-1024)✓✗partial
Dedicated enterprise deployments✓✗✗
Open APK · no store gatekeeper✓variesvaries
Volatile, shredded server logs✓✗partial
Decoy mode (plausible deniability)✓✗✗
Vanish mode (per-thread timers)✓✓✓
On-device voice transcribe + translate✓cloud only✗
Stories with E2E reactions + viewer stats✓✓basic
Sovereign multi-region roadmap✓✗✗
Installation

Six steps. Under a minute.

Direct APK install. No Play Store gatekeeper, no analytics SDK injected on the side.

01
Tap Download

Grab the latest APK from the download button above.

02
Open the file

From your downloads, tap the APK to start installation.

03
Allow unknown sources

If prompted, tap Allow so Android lets the installer run.

04
Install

Tap Install. Takes a few seconds.

05
Open AnA Devyra

Pick a node name and a strong password. That's your identity.

06
Share your Node ID

Send it to a contact. They add you. You start talking, encrypted, end-to-end, from word one.

Questions

Frequently asked.

The privacy questions worth asking, answered plainly.

Why no phone number or email?
A phone number or email is the easiest way to bind a real-world identity to a chat history. We skip it entirely. Your account is a cryptographic node ID you control, and rotate if you ever need to.
Is this really post-quantum secure?
Yes. We use ML-KEM-1024 (Kyber-1024), the NIST-standardized post-quantum KEM, for key exchange. Combined with a Double Ratchet and AES-256-GCM, conversations stay private even against a future cryptographically-relevant quantum computer.
Where are my messages stored?
On your phone. The server briefly relays ciphertext for online delivery and queues encrypted bytes for offline recipients, never plaintext, never indexed. Server logs are volatile and shredded.
Why isn't it on the Play Store?
Stores add gatekeepers, identity binding to a Google account, and analytics injection requirements. A direct APK keeps the install pure, source you trust, signature you can verify, no profile attached.
What happens if I lose my phone?
Your account effectively dies with it, which is the point. No recovery loop means no recovery vector for an attacker. Use the in-app session export to back up encrypted state to storage you control.
Do you offer enterprise deployments?
Yes, for teams, businesses, and organisations that need a dedicated relay under their own control. We deploy a hardened instance pointed at your domain, with the same E2E crypto stack and your operations team holding the keys. The full picture, honest limits included, is on the for-teams page.
Does it work between countries?
Yes. The default server lives in Mumbai with TURN relays for restrictive networks. Messages cross borders just like web traffic, and they stay encrypted the whole way.
Is it free?
Encrypted chat, voice, video, and groups: free forever. A premium tier is coming with optional LAN P2P, mesh routing, and multi-device sync, features that offload work from servers rather than add cost.
What's new in the latest release?
A lot. Stories with 10 gradient backgrounds, reactions, viewer stats and 24h auto-vanish. Voice notes + on-device transcribe + translate to 17+ languages, works inside groups too. Smart Replies via on-device ML Kit, multilingual, on tap. Send effects for celebration moments. Verified contact pills. Chat folders, multi-select, passcode-per-chat, photo OCR, and a sovereign domain. That's why you're on anadevyra.com reading this.
Where is the APK actually hosted?
GitHub Releases. Free, fast, immutable per release tag, with a published SHA you can verify. The site's download button just resolves to github.com/anadevyra/anadevyra.github.io/releases. We don't use Google Drive anymore, it added warnings and friction for nothing.
Which build should I download?
The main Download button gives you the build for newer phones (64-bit, virtually every phone from the last several years). If you're on an older phone, use the lighter build link under the button, it's a smaller, 32-bit version for legacy devices. Both are the same app, same version; pick the lighter one only if the main build won't install.
How does on-device transcribe work?
Your phone runs Whisper (whisper.cpp) entirely on-device. The multilingual model is a one-time ~141 MB download served from our own server, never from a third-party model host. Voice notes stay inside their AES-256-GCM envelope until transcribe is invoked; the transcript is produced on the phone and never sent anywhere. Translation uses offline language packs the same way. The server never sees audio or text, just sealed bytes for delivery.
What's the Switzerland plan?
Next: bring up a Switzerland region as the new primary with cross-region replication. Auto-failover at the discovery layer means every installed app migrates without an APK push. After that: extend with regional subservers close to users worldwide, anchored on the Swiss primary, with strong privacy framework alignment. Enterprise partners can host dedicated regional relays for their organisations.
What will be in premium?
The plan: optional LAN P2P routing (chats hop device-to-device on the same WiFi without touching a server), mesh routing across nearby installs, and multi-device sync over an end-to-end encrypted channel. Features that offload work, not gatekeepers in front of basics.
Why is the website on anadevyra.com now?
Sovereign DNS. anadevyra.com is owned outright with a 12-month term we renew ourselves, no platform can take it from us. The chat backend lives at api.anadevyra.com on the same domain, so brand and infrastructure stay aligned across the roadmap.
“

Built with privacy as the foundation. No company reads your messages. No phone number. No email. Just encrypted communication that only you control.

AnA Devyra Team