About
Trust math, not companies
PrivaMesh exists because privacy shouldn't depend on trusting a company to behave. We removed the company.
Our mission
Most “private” messengers ask you to trust that their servers won’t log, leak, or hand over your data. PrivaMesh takes a different position: you shouldn’t have to trust anyone. We build messaging where privacy is guaranteed by cryptography and architecture, not by a promise. There is no account database and no message store - so there is no conversation to subpoena and no inbox to breach. What we do run is one worker that pays network fees; it is named and described rather than left out of the story.
Who builds it
PrivaMesh is built by a small, privacy-focused team of engineers and cryptography practitioners, working in the open. The app is open source on GitHub, and the full design is documented in our white paper. Open source matters for a security tool: you don’t have to take our word for how it works - you can read the code and the protocol yourself.
We publish under a project name rather than personal ones. That is a deliberate choice for a privacy tool and it is also a fair thing to hold against us: you cannot check our CVs. What you can check is everything that actually determines whether the app is private - the source, the protocol, the on-chain behaviour, and the cryptographic primitives, all of which are public and none of which depend on who we are. We would rather be judged on that than on a photograph and a job title.
What we have not done yet
PrivaMesh has not been through an independent security audit. It is iOS only, and we publish no App Store rating of our own - if you see a rating attributed to us, it did not come from us. We would rather state all of that plainly than let a confident marketing page imply otherwise.
An audit is the single most valuable thing that could be added to this page, and until it exists the honest position is that our claims are verifiable in principle - the code and protocol are public - but have not been verified by a qualified third party. Treat them accordingly.
The cryptography we build on
PrivaMesh does not invent cryptography. It composes well-studied primitives that have been public and analysed for years: X3DH for key agreement, the Double Ratchet for per-message forward secrecy, AES-256-GCM for authenticated encryption, and BIP-39 for seed phrases. Novel cryptography in a shipping messenger is a warning sign, not a feature.
What we stand for
- No account database. The Solana blockchain is the transport, your device holds your keys, contacts and history, and the single fee worker we run sees an account and a timestamp.
- No identity. No phone number, no email - your account is a BIP-39 seed phrase you control.
- No metadata harvesting. Stealth addresses hide who talks to whom, and optional cover traffic - off by default - hides when.
- Honesty about trade-offs. Forward secrecy means your seed restores funds, not chat history. We say so up front, because a tool that hides its trade-offs is hiding something.
How we’re funded
PrivaMesh is a free download with paid tiers. We never sell data - there is none to sell. Sending is metered because every message is a Solana transaction with a real network fee, which our fee worker pays on your behalf; the pricing page shows what that costs and why. Our incentives are aligned with your privacy rather than against it.
Get in touch
Follow development on X and GitHub. Contributions, audits and hard questions are welcome - that’s how a serious privacy tool earns trust.