Your identity is three words, made on your phone and known to nobody else.
Android. Free and open source, GPL-3.0.
Encrypting the words is the easy part. What gets collected around them is where privacy quietly goes.
In most countries a number is tied to an identity document. Handing one over to sign up undoes much of what the encryption was for.
Uploading your contacts to find friends hands over your social graph: who you know, and who they know.
Waking your phone through Google's servers tells a third party who is messaging you, and when.
No number, no address book, no push service, and no directory anyone can search. There is nothing to hand over, because nothing is collected.
Signal's encryption underneath. Tor and Nostr relays for delivery. And an interface that tells you what it is doing instead of assuming you already know.
Nothing is registered anywhere. You get three words nobody can trace back to you, and a face you pick. That is the whole account, and it takes about a minute.
Made on this phone. Nothing was sent anywhere.
Slower and hidden from everyone, or faster and seen by a relay. Most apps decide this for you and never mention it. Kryfo puts the trade-off in plain words and lets you pick.
You can change this any time.
There is no search and no directory, so you cannot be found by accident. People come in through a code you show them, a link you send, or an introduction from someone you already trust.
A burner room expires and takes everything with it, on every phone in it. You join under a name that exists only inside that room, so leaving ends the connection completely.
Privacy software has a habit of promising more than it can keep. So here is the part most sites leave out.
No outside security firm has examined Kryfo. The cryptography it builds on is well studied, but the way this app uses it has not been independently reviewed by anyone. Work is underway to change that, and the report will be published in full, whatever it says.
Kryfo works, and it is used every day. But it is young, features are still landing, and things change between releases. If you find something broken, the issue tracker is open and every report gets read.
Kryfo is going through F-Droid inclusion now. When it lands you will be able to install and update it from there, built from the source in the open.
Every build Kryfo signs carries the same key. If you install an Android package from anywhere other than F-Droid, you can confirm it came from us before trusting it.
10:92:8A:61:64:2C:5C:C4:71:A9:98:69:E2:EA:4E:2D:4D:70:02:6E:79:7D:FB:A4:8C:0F:30:6B:5B:34:73:DBF-Droid signs its own builds with F-Droid's key, not this one, which is why a package installed from there will not match. That is expected, and it is the reason a build from F-Droid cannot update one installed by hand.