The model How it works Capabilities Security Early access
Private communication infrastructure

Private by architecture.
Not by promise.

Mes is an end-to-end encrypted messenger built on a server that knows nothing about you. Your keys are generated on your iPhone and never leave it. Everything the server touches is scrambled, unreadable data — so there is nothing to leak, subpoena, or sell.

Coming to iOS 17+ · TestFlight invitations soon

01 — Encryption
End-to-end by default. Signal Protocol. No opt-in, no "secret chat" mode.
02 — The server
Knows nothing about you. It routes sealed envelopes and never holds your keys.
03 — Your keys
Yours alone. Created on-device, kept in your iPhone's secure chip (Secure Enclave).
04 — Digital traces
Kept to a minimum. Message sizes evened out, no address book, calls via a go-between server.
§ 01 — The server's point of view

To deliver a message, most apps read it first. Mes doesn't.

Every messenger runs on a server. The question is what that server is allowed to know. Here is the difference between what an ordinary server learns about you — and what ours is built to learn.

A typical server sees

  • The text of every message you send
  • Who you talk to, and exactly when
  • Everyone in each of your groups
  • Your address book, once you upload it
  • Your IP address during a call
  • How much you send, and to whom

What Mes sees

  • Message content→ scrambled, unreadable data
  • Who you talk to→ a delivery tag, not who you are
  • Your group members→ never uploaded
  • Your address book→ stays on your device
  • Your IP in calls→ hidden behind a go-between server
  • The size & rhythm of chats→ evened out so nothing shows
Live · what leaves your device
You write
The documents are in the usual place.
The server carries
u2FsdGVkX1+9Qm5x……
§ 02 — How it works

Four steps, and your words are already unreadable.

No accounts to hack for your history, no cloud to raid. The cryptography is the same family that secures Signal — we didn't roll our own.

01

Keys are forged on your device

When you set up Mes, your identity and message keys are generated on your iPhone and sealed inside its secure chip (the Secure Enclave). They never leave it — not in a backup, not to us, not to anyone.

Technical detailsSignal ProtocolPQXDHSecure Enclave
02

Every message is sealed end-to-end

Text, attachments and call setup are encrypted for your recipient alone using the Double Ratchet — a fresh key for every single message, so that even a future key compromise can't unlock your past conversations.

Technical detailsDouble RatchetSender KeysForward secrecy
03

The server only moves sealed envelopes

Our server passes along only scrambled data and the bare minimum needed to deliver it. The connection is secured and verified, and there's no readable text — so there's nothing to log, and nothing meaningful to hand over.

Technical detailsZero-knowledgeXEd25519TLS 1.3SPKI pinning
04

Only your recipient can open it

Decryption happens on their device and nowhere else. Confirm you're talking to the right person by comparing a safety number in person or over QR — you're trusting the key in your hand, not a name in a database.

Technical detailsSafety numberQR verification
§ 03 — Capabilities

A full messenger. None of the surveillance.

Everything you expect from a modern app — held to a stricter rule about what may ever leave your phone.

01

Conversations

One-to-one and small groups, with replies, reactions and edits. Photos, video and files — every one of them encrypted.

02

Private calls

One-to-one audio and video routed through a go-between server, so the person you call never sees your IP address — or where you are.

03

Disappearing messages

Set a timer per chat. When it runs out, the message is gone from both devices. No archive, no shadow copy, no exception.

04

Verify in person

Scan a safety number by QR to prove there's no one in the middle. Keys are pinned, and you're warned the moment one ever changes.

05

Run your own server

Run Mes on your own server, or in a cloud you choose. Keep work and life apart — and don't depend on anyone else's servers.

06

Several accounts, one app

Hold more than one identity and switch between them without ever leaking one into another. Each lives on its own server.

The absence of surveillance shouldn't be a feature you switch on. It should be the ground you stand on.
Mes · Design principle 01
§ 04 — Who it's for

For people who can't afford to be read.

Mes wasn't built for a marketing persona. It was built for the situations where the wrong person seeing the wrong message has a real cost — and for everyone who thinks that standard should be normal.

A

Journalists & their sources

Protect who talked to you, not only what was said. Who contacted whom is part of the story too.

B

Activists & organizers

Coordinate without handing anyone a map of your network — who, when, how often.

C

Security & legal teams

A channel with nothing to subpoena, because there is nothing on the server to read.

D

Everyone else

Because privacy shouldn't require a reason, a security background, or a subscription.

§ 05 — Security

Don't trust. Verify.

Privacy you have to take on faith isn't privacy. Mes is designed so the guarantees hold even if you don't trust us — because the architecture, not our good intentions, is what protects you.

Built on the Signal Protocol

The same audited, peer-reviewed cryptography that secures Signal — PQXDH, Double Ratchet, Sender Keys. We didn't invent our own crypto, and neither should anyone.

A server that knows nothing about you

The server is built to hold only scrambled data and the little it needs to deliver — nothing more. There is no readable text, no key, and no contact list to breach, sell, or be compelled to reveal.

Keys under hardware protection

Keys live in your iPhone's secure chip (the Secure Enclave). If encryption can't run safely, Mes would rather not send your message than send it unprotected.

Recovery you control

A 24-word recovery phrase restores your identity to a new device. We can't reset it for you — and that impossibility is exactly what keeps it yours.

A duress PIN

Enter a second, decoy PIN under coercion and Mes opens an innocuous profile instead of your real one. Deniability, for the moment you need it most.

Delete for everyone

Recall a message and it's removed from both sides of the conversation — not just hidden on yours.

An honest note. Mes is young; its security model is not. We build on cryptography that has been studied for a decade, we keep the server deliberately ignorant, and we're working toward an independent audit and a way for anyone to verify the app is built from exactly the open code we publish — so you never have to take our word for any of it. Where we're still early, we'll say so — here and in the app.

§ 06 — Early access

Mes is coming to iOS.

We're finishing the parts that have to be right before the parts that are merely nice — reliability, groups, the audit. Leave your email and we'll send a TestFlight invitation (Apple's beta program) when the next build is ready. No newsletter. No noise.

iOS 17+ · We'll only ever use your address to send an invitation.