End-to-end encrypted. Peer-to-peer. Works offline over Bluetooth mesh.
No servers. No phone number. No metadata. Just conversation.
Features
Noise XX handshake with X25519 + ChaCha20-Poly1305. The same framework trusted by WireGuard and Lightning Network. Nobody reads your messages. Not even us — because there is no "us."
Messages hop device-to-device over BLE. No cell towers, no Wi-Fi, no internet. Up to 7 hops across the mesh with bloom filter deduplication. Works in protests, off-grid, anywhere.
When online, NIP-17 encrypted messages route through decentralized Nostr relays. No central server to subpoena. Seamless switch between offline mesh and online relay.
All clearnet traffic routed through Tor via the Arti Rust client. Three-hop onion routing. Your IP is never exposed to relays, servers, or any network participant. Ever.
A polished, modern interface. Conversation threads, read receipts, voice messages, group chats, file sharing — all the messaging features you expect, none of the surveillance.
Share files up to 50 MB with AES-256-GCM. Small files go directly over mesh. Larger files route through encrypted Blossom servers — they only ever see ciphertext.
Interoperable
Privata's entire protocol layer is inherited from the open-source Bitchat project. Same mesh network. Same encryption. Same packet format.
Full cross-talk. Every Bitchat user can message Privata users and vice versa. Zero configuration, zero bridges.
Same mesh, better UX. Privata adds a production-grade chat interface on top of the proven Bitchat protocol.
Shared network effect. Every new Privata node strengthens the Bitchat mesh. Every Bitchat node extends Privata's reach.
Open protocol. The protocol is public, auditable, and anyone can build on it. View on GitHub →
Messages flow freely between Privata and Bitchat users across the shared mesh network
How It Works
A Noise keypair is created locally on first launch. No email, no phone number, no cloud account. Your device is your identity.
BLE scans for nearby Privata and Bitchat users. When online, Nostr relays extend your reach globally — all through Tor.
Noise XX establishes a shared secret. Every message is encrypted before it leaves your device. Zero plaintext on the wire.
Messages hop through the BLE mesh or route via Nostr relays. Bloom filter deduplication keeps the network efficient.
Under The Hood
Privata doesn't invent its own crypto. Battle-tested protocols, open-source code, zero trust assumptions.
X25519 ECDH for key exchange, ChaCha20-Poly1305 for symmetric encryption. Forward secrecy. Mutual authentication. Deniability.
Binary packet format with 13-byte fixed headers. Up to 7 intermediate hops. Bloom filters prevent broadcast storms.
Private messages wrapped in NIP-17 encrypted events, routed through decentralized relays. No central server.
Embedded Rust-based Tor client. Three-hop onion routing for all clearnet traffic. IP anonymity by default.
Random per-file keys. Client-side encryption before upload. Blossom servers see only ciphertext.
Protocol layer inherited from the open-source Bitchat project. Fully interoperable with the existing Bitchat mesh network.
Compare
| Privata | Signal | Others | |
|---|---|---|---|
| E2E Encryption (default) | ✓ | ✓ | varies |
| No phone number required | ✓ | × | × |
| Works without internet | ✓ | × | × |
| No central server | ✓ | × | × |
| IP address hidden (Tor) | ✓ | × | × |
| Metadata-free | ✓ | partial | × |
| Decentralized network | ✓ | × | × |
| Interoperable protocol | ✓ | × | × |