WingPost: Private Messenger · Post-Quantum Encrypted

Capabilities · Latest

A real messenger, sealed all the way down.

Post-quantum crypto, on-device intelligence, and the everyday features people actually use, Stories, voice transcribe, smart replies, encrypted groups, channels, calls and true end-to-end media. Sealed before they leave your phone.

Cryptography

Kyber-1024 Post-Quantum

ML-KEM-1024 key exchange, NIST-standardized. AES-256-GCM payload. Built to outlive quantum.

Double Ratchet Forward Secrecy

Every message gets a fresh ephemeral key. Compromise one, exactly one, message. Nothing before, nothing after.

True End-to-End Media

Photos, video, voice notes and files are encrypted on your device with a unique per-file key before they ever leave it. The server only ever holds bytes it cannot read, your media is as private as your words.

Verified Contacts ✓

On-device safety-number ratchet. Verify a contact once, the ✓ pill follows them through every chat, header, and contact list.

Identity

No Phone Number

No Email Required

No inbox to compromise, no recovery loop to phish. Lose your device, lose the account, that's the point.

Decoy Mode

A second PIN reveals a separate, innocuous account. Plausible deniability, built in.

Ghost Mode

Hide your presence entirely, last-seen, online dot, typing indicator, read receipts. You see them; they don't see you.

Private Keyboard

An optional keyboard built right inside the app, so no third-party keyboard ever sees a word before our encryption does. Type, switch languages, dictate by voice and translate inline, every keystroke stays on your device.

Panic Mode

One trigger and the real account wipes, keys, messages, contacts, gone in seconds. Restore later from a backup, or don't.

Hidden Chats

PIN-locked chats disappear from your main list behind a disguise name you choose, and auto-relock the moment you leave the app. A snooper never learns the vault is even there.

Burner Identities

Spin up a short-lived throwaway identity for one conversation, then burn it, wiped from your phone, removed server-side, and erased from your contact's device too.

Profile Bio & Links

Add a bio and your links to your profile, with an audience picker that decides exactly which contacts are allowed to see them.

Last-Seen Control

Accurate last-seen presence stamped by the server, and Ghost Mode turns it fully off the instant you want to vanish.

Conversations

Stories ✨

24-hour Stories with 10 gradient backgrounds, emoji reactions, viewer stats, and per-contact privacy. Same E2E pipeline as DMs, the server is blind.

Voice Notes + Transcribe

Record, send, transcribe on-device with one tap. Translate to 17+ languages (including Hindi, Russian, Spanish, Arabic) all locally. Audio never leaves the encrypted envelope.

Smart Replies

Multilingual ML Kit suggestions appear over the composer for fresh messages and pop on tap for any older one. Inference 100% on-device, your text never leaves the phone.

Rich Text Formatting

Bold, italic, underline, strikethrough, monospace code, block-quotes and links, applied right from the selection toolbar. Styles attach to your words, never as stray symbols left in the message.

Send Effects

Celebration overlays (confetti, hearts, fireworks) triggered by phrases or sent on-demand. Pure on-device animation; nothing extra goes through the server.

Vanish Mode

Disappearing messages with per-thread timers. They go, from both phones, and from the server too.

Encrypted Groups

Group chats with sender authentication, per-participant ratchets, in-group voice transcribe + translate, and send effects for everyone.

Special Days

Birthdays, anniversaries, festivals, track the dates that matter and get a private nudge in the morning. Wishes broadcast E2E, server never sees the occasion.

Burner Messages

Send a text message sealed with a burn timer, pick the seconds, minutes or hours it lives after the receiver opens it. Choose trace (leaves a faint 🔥 marker after burn) or no-trace (vanishes as if the message never existed). Works in 1-to-1 and groups.

Stealth Messages

Sender hides the content behind a tap-to-reveal blur. The bubble shows nothing, even on a glance at the lock screen.

Time-Lock Seal

Write today, deliver later. The bubble shows as sealed until the unlock time you pick, even the receiver can't peek before then.

Saved Messages

A private notes-to-self channel built right into your chat list. Drop links, photos, audio thoughts, encrypted, on-device, off the cloud.

Delete: No Trace

Pull a message back so completely it leaves no "this message was deleted" note. It vanishes on both sides as if it was never sent, the rare delete that leaves nothing behind.

Pinned Messages

Pin the messages, chats and contacts that matter most so they stay right at the top, always within reach.

Live Translation

Translate a whole conversation, or set per-contact auto-translate, across 17+ languages, all on-device, with no message ever sent to the cloud.

Channels

Encrypted Channels

Broadcast to a crowd the private way. Channels fan out end-to-end to every subscriber, so the server never reads a post. Join by code, QR, or search by name.

Roles & Moderation

Owners and moderators with fine-grained control, add or remove members, promote, mute or kick, and gate exactly who is allowed to post.

Threaded Comments

Subscribers reply under any post in clean threads (with reactions, translation, read-aloud and self-destruct timers) so the whole conversation stays neatly organised.

Join Requests & Approval

Run it open, request-to-join with owner approval, or discoverable and searchable. Owners get a live alert and one-tap review for every pending request.

Likes & Views

Posts show aggregate like and view counts everyone can see, while who reacted or watched always stays private.

Media

Encrypted Profile Photos

Even profile photos are encrypted on your device and sync privately to your contacts, the server holds a picture it can never open.

Round Video Notes

Send quick circular video notes straight from the camera, with a one-time-view option that plays exactly once, then burns.

View-Once Media

Share a photo or video that opens a single time and is gone, no save, no second look.

Media Spoilers

Hide a photo or video behind a tap-to-reveal blur, so a glance over your shoulder shows nothing until you choose to look.

Photo Editor

Draw, add text and crop before you send, a built-in editor right in the caption preview, flattened and encrypted like any other photo.

Photo Albums

Send a whole set of photos and videos as one tidy album in a single bubble. Swipe through the grid, caption the group, every frame sealed with its own key before it leaves your phone.

Live Wallpapers

Dress every chat in a living backdrop, gentle animated scenes and gradients that breathe behind your messages. Pick one per chat or set it everywhere, all rendered on-device.

Redesigned Photo Viewer

A full-screen media viewer rebuilt from the ground up, fluid pinch-zoom, swipe between every shot in the chat, and quick actions right under your thumb.

Calls

Encrypted Voice Calls

WebRTC with DTLS-SRTP. End-to-end encrypted, with a TURN fallback for restrictive networks.

Encrypted Video Calls

Face-to-face that nobody intercepts. Same crypto stack as voice, no compromise for video.

Group Voice Calls

Host group voice calls carried over the same WebRTC DTLS-SRTP encryption as 1-to-1 calls, live roster, per-person status, and join straight from the banner with one tap.

Power user

Chat Folders

Custom folders organize chats, work, family, private. Switch with a swipe; never lose a thread to the scroll.

Passcode per Chat

Lock individual chats with their own PIN. Even someone with your phone unlocked can't open them.

Photo OCR

Extract text from any received image, on-device. Copy a phone number, an address, a code without re-typing.

Global Regex Search

Power-user toggle: search across every chat with regular expressions. Local, indexed, instant.

Scheduled Messages

Write today, deliver at 6 AM tomorrow, or every Monday at 9. One-time, daily, or weekly recurrence. The phone holds it locally until it fires.

Quiet Hours

Set a daily start + end and notifications stay silent in between. Auto-resume the next morning. Per-contact muting layers on top.

On-Device Assistant

A warm personal assistant and "While you were away" recap that answers questions and sums up what you missed, running entirely on your phone, with no cloud and no network.

Family Vault

A private, on-device encrypted locker and shared credential store for your most trusted circle.

Sticker Studio

Create and import your own sticker packs, alongside hand-painted festival, regional and traditional packs built right in.

Cross-Chat File Search

Find any file across every chat (by name, caption, on-device OCR text, or even voice-note transcript) with a files-only filter a tap away.

Infrastructure

Business · Enterprise hosting

Need a private deployment for your team? A dedicated, hardened relay on your own domain, same encryption stack, isolated from the public network. See how it works →

Zero Metadata

No access logs. Ephemeral system logs. Comprehensive auto-cleanup across every server surface, nothing useful sticks around.

Stealth Tunnel

Cover traffic and adaptive privacy patterns that blur the shape of your conversations.

In-App Browser

Open links inside a private, skin-aware browser (progress, lock and share controls included) without ever leaving the app.

Link Previews

Rich link cards are fetched locally through our privacy proxy, so the metadata never travels between you and your contact, and the linked site only ever sees the server.

Architecture

How it works.

Three layers between you and a watcher. Each one ends in failure for the watcher.

Keys live on your device

Your phone generates an ML-KEM-1024 keypair the first time you launch the app. The private key never leaves the device. Servers only ever see ciphertext.

Sealed in transit

Every message is wrapped in a fresh Double Ratchet key, then AES-256-GCM. Compromise one key and you compromise exactly one message, nothing before, nothing after.

Decrypted on the other phone

Only the recipient's device holds the matching private key. We can't decrypt. We don't keep metadata logs. There's nothing to subpoena, leak, or sell.

On the way

What's coming to the app.

The chat, calls, channels and Stories you have today are just the start. Here's what we're building next, privacy-first, every step.

Next up

Multi-device sync

Use one account across more than a single device (phone, tablet and beyond) kept perfectly in step over an end-to-end encrypted channel. Your keys never leave your hands.

End-to-end encrypted device-to-device sync
No plaintext ever parked on a server
One identity, every device you own

In the lab

LAN P2P & mesh routing

Chats that hop straight device-to-device on the same Wi-Fi, and across nearby installs, without a server in the middle. Less infrastructure, more privacy, even on hostile networks.

Same-Wi-Fi peer-to-peer delivery
Mesh relay across nearby devices
Keeps working when the network is limited

Planned

One-tap on Google Play

A Play Store listing for effortless install and automatic updates, the exact same privacy-first build, with zero analytics SDKs bolted on. The direct APK stays available, always.

One-tap install and auto-updates
Identical no-tracking build
Direct APK never goes away

Server roadmap

A global multi-region network.

Live in Mumbai today, with a Switzerland-anchored future and regional subservers close to every user. A clear path, built region by region.

Now · live

Mumbai: first region live

Our production region runs on GCP Mumbai behind a custom api.anadevyra.com domain, low latency across India and Asia, reachable worldwide, hardened and monitored every day.

Ephemeral system logs · no access retention
Let's Encrypt TLS on an independent domain we own
Comprehensive auto-cleanup across every server surface

Switzerland: new primary

Bring up a Switzerland region as the new primary, with cross-region replication of the vault, pending queue and identity directory, and health-checked failover at the discovery layer.

No APK push needed, the app finds the new primary on its own
Mumbai stays online as a regional subserver
Anchored in Switzerland's strong privacy tradition

Then

Global subserver network

Grow regional subservers close to users, all anchored on the Swiss primary, with enterprise partners able to run dedicated regional relays for their own organisations.

Enterprise-region deployments scoped per partner
Discovery layer routes each app to its nearest healthy region
Resilience by topology, not by any single provider

Privacy posture

Honest about what the server sees.

No "trust us" copy. Here's exactly what the server can and can't see, and what survives a subpoena.

Server can see

Encrypted bytes for delivery, never plaintext
A short queue of pending recipient IDs, never content
Ephemeral system logs that aren't retained

Server can't see

Your messages, sealed before they leave your phone
Your contacts, no contact list lives server-side
Your name, phone, email, we never asked

What a data request would find

Nothing useful, encrypted bytes are unrecoverable without the recipient's private key
No identity bound to any account
No retained access logs to correlate against

Read the full security model →

how we stack up

Why it's different.

Same encryption strength as the best privacy apps, and less identity exposure than any of them.

	WingPost	Mainstream messengers	Privacy-focused apps
No phone number required	✓	✗	✗
No email required	✓	varies	✓
End-to-end encryption (default)	✓	varies	✓
Post-quantum (Kyber-1024)	✓	✗	partial
Dedicated enterprise deployments	✓	✗	✗
Open APK · no store gatekeeper	✓	varies	varies
Volatile, shredded server logs	✓	✗	partial
Decoy mode (plausible deniability)	✓	✗	✗
Vanish mode (per-thread timers)	✓	✓	✓
On-device voice transcribe + translate	✓	cloud only	✗
Stories with E2E reactions + viewer stats	✓	✓	basic
Sovereign multi-region roadmap	✓	✗	✗

Installation

Six steps. Under a minute.

Direct APK install. No Play Store gatekeeper, no analytics SDK injected on the side.

Tap Download

Grab the latest APK from the download button above.

Open the file

From your downloads, tap the APK to start installation.

Allow unknown sources

If prompted, tap Allow so Android lets the installer run.

Install

Tap Install. Takes a few seconds.

Open AnA Devyra

Pick a node name and a strong password. That's your identity.

Share your Node ID

Send it to a contact. They add you. You start talking, encrypted, end-to-end, from word one.

Questions

Frequently asked.

The privacy questions worth asking, answered plainly.

Why no phone number or email?

A phone number or email is the easiest way to bind a real-world identity to a chat history. We skip it entirely. Your account is a cryptographic node ID you control, and rotate if you ever need to.

Is this really post-quantum secure?

Yes. We use ML-KEM-1024 (Kyber-1024), the NIST-standardized post-quantum KEM, for key exchange. Combined with a Double Ratchet and AES-256-GCM, conversations stay private even against a future cryptographically-relevant quantum computer.

Where are my messages stored?

On your phone. The server briefly relays ciphertext for online delivery and queues encrypted bytes for offline recipients, never plaintext, never indexed. Server logs are volatile and shredded.

Why isn't it on the Play Store?

Stores add gatekeepers, identity binding to a Google account, and analytics injection requirements. A direct APK keeps the install pure, source you trust, signature you can verify, no profile attached.

What happens if I lose my phone?

Your account effectively dies with it, which is the point. No recovery loop means no recovery vector for an attacker. Use the in-app session export to back up encrypted state to storage you control.

Do you offer enterprise deployments?

Yes, for teams, businesses, and organisations that need a dedicated relay under their own control. We deploy a hardened instance pointed at your domain, with the same E2E crypto stack and your operations team holding the keys. The full picture, honest limits included, is on the for-teams page.

Does it work between countries?

Yes. The default server lives in Mumbai with TURN relays for restrictive networks. Messages cross borders just like web traffic, and they stay encrypted the whole way.

Is it free?

Encrypted chat, voice, video, and groups: free forever. A premium tier is coming with optional LAN P2P, mesh routing, and multi-device sync, features that offload work from servers rather than add cost.

What's new in the latest release?

A lot. Stories with 10 gradient backgrounds, reactions, viewer stats and 24h auto-vanish. Voice notes + on-device transcribe + translate to 17+ languages, works inside groups too. Smart Replies via on-device ML Kit, multilingual, on tap. Send effects for celebration moments. Verified contact pills. Chat folders, multi-select, passcode-per-chat, photo OCR, and a sovereign domain. That's why you're on anadevyra.com reading this.

Where is the APK actually hosted?

GitHub Releases. Free, fast, immutable per release tag, with a published SHA you can verify. The site's download button just resolves to github.com/anadevyra/anadevyra.github.io/releases. We don't use Google Drive anymore, it added warnings and friction for nothing.

Which build should I download?

The main Download button gives you the build for newer phones (64-bit, virtually every phone from the last several years). If you're on an older phone, use the lighter build link under the button, it's a smaller, 32-bit version for legacy devices. Both are the same app, same version; pick the lighter one only if the main build won't install.

How does on-device transcribe work?

Your phone uses Google ML Kit speech recognition with the model running locally. Voice notes stay inside their AES-256-GCM envelope until transcribe is invoked; the transcript is produced on-device and never sent anywhere. Translation uses ML Kit's offline language packs the same way. The server never sees audio or text, just sealed bytes for delivery.

What's the Switzerland plan?

Next: bring up a Switzerland region as the new primary with cross-region replication. Auto-failover at the discovery layer means every installed app migrates without an APK push. After that: extend with regional subservers close to users worldwide, anchored on the Swiss primary, with strong privacy framework alignment. Enterprise partners can host dedicated regional relays for their organisations.

What will be in premium?

The plan: optional LAN P2P routing (chats hop device-to-device on the same WiFi without touching a server), mesh routing across nearby installs, and multi-device sync over an end-to-end encrypted channel. Features that offload work, not gatekeepers in front of basics.

Why is the website on anadevyra.com now?

Sovereign DNS. anadevyra.com is owned outright with a 12-month term we renew ourselves, no platform can take it from us. The chat backend lives at api.anadevyra.com on the same domain, so brand and infrastructure stay aligned across the roadmap.

“

Built with privacy as the foundation. No company reads your messages. No phone number. No email. Just encrypted communication that only you control.

AnA Devyra Team

Private by design.

The feeling of a message no one else will ever read.