Frequently Asked Questions

SecureChat is a messaging app that keeps your conversations truly private. Every message is encrypted on your phone before it leaves. We use XChaCha20-Poly1305 encryption — the same kind used by security professionals. Your identity is tied to Kaspa, a decentralized blockchain, not to your phone number. There is no central server. No one can read your messages. Not even us.

No. This is not a promise — it is a technical fact. Messages are encrypted end-to-end. The encryption keys are created on your device and never leave it. We do not have them. We cannot hand them over to anyone, even if asked by a court. It is physically impossible for us to read your messages.

No. You do not need a phone number, email address, or any personal information. When you open SecureChat for the first time, it creates a unique identity on your phone. You share it with friends using a simple QR code. That is all it takes to connect. No sign-up. No account.

SecureChat is currently in Phase 1 pre-alpha. We are building and testing the core encryption and messaging engine. A public alpha for Android is planned for Q3 2026. You can follow progress on GitHub and join the discussion there.

Yes. SecureChat is fully open source under the GPL-3.0 license. Every line of code is public on GitHub. Anyone can inspect the encryption, verify there are no backdoors, and build the app from source. Transparency is not optional — it is how trust works.

Nothing. There is no server that stores your messages. Messages travel through decentralized relay nodes on the Kaspa network. Relay operators see only encrypted blobs — meaningless data. Once a message is delivered, it is deleted from the relay. We do not collect analytics, contacts, IP addresses, or any personal information. Ever.

Yes. SecureChat is built by Vendetta Labs, based in Greece (EU). We comply fully with the EU General Data Protection Regulation. Since we collect virtually no personal data, most GDPR rights are satisfied by default. There is nothing to delete because we never stored anything in the first place.

Chameleon has no internet permission. It cannot send data anywhere, even if it wanted to. Everything stays on your phone. Your rules, your encrypted files, your settings — all stored locally in an SQLCipher encrypted database. The source code is on GitHub so you can verify this yourself.

Four layers working together. XChaCha20-Poly1305 encrypts every message (256-bit, with a 192-bit nonce — virtually impossible to break). X25519 handles the key exchange between you and your contact. The Double Ratchet protocol gives you forward secrecy — even if one key leaks, past messages stay safe. And Argon2id protects your local data with memory-hard key derivation. This is the same crypto stack used by SecureCall.

Think of it like passing a sealed letter through strangers. Your message travels through 2 or 3 relay nodes before reaching its destination. Each node only knows who gave it the message and who to pass it to — never both the sender and the receiver. Pro users get 2-hop routing. Elite users get 3-hop routing. Nobody can trace the full path from you to your contact.

Tap 5 times. Everything is gone in under a second. All messages, all keys, all contacts, all local data — wiped instantly from your device. No confirmation dialog. No undo. Designed for situations where you need your data to disappear immediately. It is like a self-destruct button for your entire chat history.

Yes. The core app is free forever. End-to-end encryption, decentralized messaging, QR identity — all included at no cost. Pro costs €9 lifetime (one-time, not a subscription). Elite costs €19 lifetime. Pro adds 2-hop onion routing. Elite adds 3-hop routing and priority relay access. No monthly fees. Ever.

IFR is an Ethereum ERC-20 token. Instead of paying euros, you can lock IFR tokens on-chain to unlock lifetime access. Lock ≥2,000 IFR for Pro. Lock ≥6,000 IFR for Elite. Your tokens stay yours — they are locked, not spent. As long as they are locked, your access is active. One lock works across SecureChat, SecureCall, and Chameleon. Details: IFR Token

€54 one-time or lock ≥8,000 IFR — and you get everything. SecureCall Premium, SecureChat Elite, and Chameleon Elite. All products. All features. All tiers. Forever. No subscriptions, no renewals, no hidden costs. One payment, lifetime access to the entire StealthX Platform.

Chameleon is a privacy layer for your entire phone. It runs quietly in the background and encrypts text in any app — automatically. It uses Android's AccessibilityService to read what is on screen, encrypts it with XChaCha20-Poly1305, and puts the encrypted version back. Think of it as a Privacy OS that makes your messages invisible to anyone looking over your shoulder. It is part of the SecureChat ecosystem. Learn more →

No. Chameleon uses Android's AccessibilityService, but only locally on your device. It never connects to the internet. It has no internet permission at all. Everything it does stays on your phone. The full source code is available on GitHub under GPL-3.0, so you can verify this claim yourself. We built it to protect you, not to watch you.

No. Each app works perfectly on its own. SecureChat handles encrypted messaging. Chameleon handles overlay encryption across all apps. But together, they form a complete privacy layer. Chameleon can automatically protect your SecureChat conversations with an extra encryption layer, hide content when someone is looking, and switch to decoy mode based on your location. They are stronger together — but neither requires the other.