Private messaging · without a central owner
Your identity stays on your phone. Your messenger is open source. You choose who carries messages and who notarizes the group.
Most messengers put identity, delivery, rules, and interface behind one company. Onym separates them, so one operator cannot take away the whole system.
Your identity is generated locally. Keys, contacts, group memberships, and message history stay on your device, never in an Onym account database. A twelve-word recovery phrase restores your identity on a new phone; Onym never receives it and cannot reset or revoke it.
No phone number. No email.The iPhone and Android clients are open source and MIT-licensed. End-to-end encryption happens on your device; chats and history remain local. Inspect the interface, cryptography, message formats, and network behavior before you trust it; then build or fork the app yourself.
A window, not a gatekeeper.Nostr relays carry encrypted messages and invitations; Blossom servers store encrypted media. Operators see connection metadata—IP address, timing, and size—but never message plaintext or private keys. Choose another service, use several, or run your own.
The courier cannot read the letter.Stellar contracts enforce group rules against cryptographic membership commitments—not a readable member list, group name, or conversation. The ledger still reveals group-level metadata such as the governance model, capacity tier, update timing, and sometimes a member count.
The notary never sees the roster.The actual iPhone app
You should not need to understand infrastructure to have a private conversation. Create an identity, make a group, invite people, and talk.
Your chats, groups, and private conversations are where you expect them. No architecture lesson required.
Messages and media feel familiar, while end-to-end encryption protects the conversation underneath.
It lives on your device—not in an Onym account. Back it up, move it, or build the open-source client yourself.
Nostr relays carry encrypted envelopes. Use ours, choose another, or run your own—the courier never owns your identity.
Stellar verifies group updates against hidden membership commitments. It never stores the roster, name, or conversation, though the governance model, capacity tier, and state-change timing are public. Identity, courier, and notary never collapse into one owner.
Android on Google Play · iPhone on the App Store · Open source
Use the defaults. Replace the courier. Deploy the notary. Build the client. Your conversation does not depend on one company remaining in control.
