Download
Download PrivaMesh
All three platforms have a build you can install today. What differs is how you pay and how much has been tested, and both are written on the card rather than left for you to find out.
iPhone
iOS 26.5 or later · version 1.0
Free to install. No phone number, no email, no account - the app generates your identity on the device when you first open it. Paid tiers work here and only here.
The one with real use behind it
This is the client that ships on the App Store and the one people actually run. It is also the reference the others are measured against: the Android and Windows clients derive their protocol layers from this source and are vector-checked against it, so where they disagree, this is what is correct.
Windows
Windows 10 64-bit · version 1.0.0
Java is bundled, so there is nothing else to install, and the installer never asks for administrator. There is no subscription on the desktop and no relay in the path: the client makes its own Solana fee wallet, you fund it, and each message pays its own network fee - about $0.0008, so roughly 6,000 messages for $5.
Windows will warn you
You will see "Windows protected your PC". This build carries no code-signing certificate, so Windows does not recognise the publisher - it is not a report of anything found in the file. Click "More info", then "Run anyway". The certificate is also the thing that would let you check this really came from us, so until it exists there is nothing here worth checking it against - that is a gap, and it is ours to close.
Android
Android 8.0 or later · version 0.1
A release build signed with the real key, so later versions install over it as an update and your account survives. Paid tiers do not work here yet - the relay verifies Apple receipts and has no Google Play path - so Android is free tier only for now.
Sideloading, and what was tested
Android will ask you to allow installs from wherever you downloaded this. The build was driven through account creation, phrase generation and a relaunch on an Android 15 emulator, which is the check that matters after R8 rewrites the crypto and database code. It has not been run on a real device, and no Android build has yet sent a message on mainnet.
What happens first
- The app generates a 12-word recovery phrase on your device
- Write it down on paper - there is no reset and no backup we hold
- Set a passcode, and biometric unlock if the device offers it
- Pick a nickname so people can find you without a phone number
- Add a contact by QR code or nickname; both sides must add each other
The iPhone version, minimum iOS and price come straight from the App Store listing rather than being maintained by hand, so they cannot drift from what Apple shows. The Windows figures come from the release that hosts the file you download.
Before you install
Two things are worth knowing up front, because both surprise people later. Your message history cannot be moved to another device or restored after a reinstall - forward secrecy destroys each message key after use, and that is the guarantee working rather than a missing feature. And sending is metered: the app is free to install, but every message is a real transaction with a real network fee. See pricing for what that costs.
Those two apply to every platform. What differs is who pays: on iPhone a subscription buys blind tokens that our one fee worker redeems, while the Windows client skips that worker entirely and spends from a Solana wallet you fund yourself. Exactly what each component can observe is on the architecture page, and what none of it protects you from is on limitations.
Frequently asked questions
Why does PrivaMesh need iOS 26.5?
The post-quantum handshake uses X-Wing, which combines ML-KEM-768 with X25519 and relies on cryptography APIs introduced in iOS 26. Supporting older systems would mean shipping only the classical handshake, and the decision was to require the newer one rather than quietly ship a weaker default.
What do I need to sign up?
Nothing. No phone number, no email, no username to reserve. The app generates a 12-word recovery phrase on your device on first launch - write it down, because it is the only way back into the account.
Is it free?
The download is free. Sending is metered because every message is a paid transaction on a public chain - the pricing page lists allowances and tier prices.
Why does the Windows installer trigger a security warning?
The build is not code-signed, so Windows does not recognise the publisher and shows "Windows protected your PC". It is not a report of anything found in the file - click "More info", then "Run anyway". The same missing certificate is why there is no real way to confirm the file came from us, and a published checksum would not fix that: anyone able to replace the download could replace the checksum beside it. A signing certificate is the fix, and this build does not have one yet.
What is different about the Android build?
It is version 0.1 rather than 1.0, and that is not modesty. It has been driven through account creation, phrase generation and a relaunch on an emulator - the checks that catch R8 breaking the crypto and database code - but it has not run on a real device, and no Android build has yet sent a message on mainnet. It is signed with the real key, so later versions install over it as an update.
Do paid tiers work on Windows and Android?
Not the way they do on iPhone. The relay verifies Apple receipts and has no Google Play path, so Android would start free-tier only. Windows does not use the relay at all: the desktop client makes its own Solana fee wallet that you fund directly, so there is no subscription to carry over.