PyroChat
Everyone
info
1+
Downloads
About this app
PyroChat is a messenger built for people who need their conversations to stay between them. Messages are encrypted on your phone with the Signal protocol before they leave it, and the server that carries them keeps nothing: no message history, no accounts, no logs. When a message is delivered, or after 48 hours, it no longer exists anywhere except on the two phones that hold the keys.
There is no phone number, no email, no contact upload. You pick a username and a password. The password never leaves your device, which also means there is no recovery: lose it and the account is gone. That is the point.
WHO KNOWS WHAT
The relay knows a hash of your username, your public keys, and encrypted messages while they wait for delivery. It can never know what you wrote, who you are, or your history after delivery.
Cloudflare knows that your phone connected to relay.pyrochat.ca and when. It can never know content or usernames; both are encrypted or hashed before they leave your phone.
Google knows, only if you turn wake push on, that a content-free wake ping was sent. It can never know the sender, the text, or how many messages.
Someone holding your phone knows that an app is installed. They can never know anything without the password. A wrong password is indistinguishable from an empty app, and a duress PIN shreds everything.
Google's data safety label lists "User IDs" and "Device or other IDs": those are the username hash and the optional wake push token described above. Nothing else.
BUILT IN
• Self-destruct: per-message or per-chat timers that start when the recipient actually reads, and count down on both phones together.
• Screenshot shield: screenshots and screen recordings of the app come out black. If a peer tries anyway, you're told, and the thread can burn on both ends.
• Delete for both: retract a message from both phones. It only happens once the other side is reachable, never silently just for you.
• Duress PIN: a second password that wipes everything and presents a fresh, empty app.
• Dead-man switch: if the app isn't opened for 7, 30 or 90 days, it wipes itself.
• Safety numbers: verify a contact in person, or scan each other's code to add and verify in one step. Key changes are flagged.
• Desktop link: read and reply from a browser while your phone keeps the keys. The browser never holds keys; lock your phone or close the app and the link dies with it.
• Tor and proxies: route every connection through a SOCKS5 proxy. If the proxy is down, the app stays offline rather than leaking your address.
• Encrypted backup: move to a new phone with a passphrase-protected backup file. Nothing is ever backed up to us.
• What it sends: text, emoji, voice notes, images and files. No video, no calls, by design.
PyroChat is free. There is no subscription and nothing to buy.
The app's source code will be published under the AGPL, so anyone can read exactly what it does with your keys.
PyroChat is not affiliated with or endorsed by Signal Messenger, LLC, whose libsignal library provides the encryption.
Requires Android 10 or newer. Phones only.
There is no phone number, no email, no contact upload. You pick a username and a password. The password never leaves your device, which also means there is no recovery: lose it and the account is gone. That is the point.
WHO KNOWS WHAT
The relay knows a hash of your username, your public keys, and encrypted messages while they wait for delivery. It can never know what you wrote, who you are, or your history after delivery.
Cloudflare knows that your phone connected to relay.pyrochat.ca and when. It can never know content or usernames; both are encrypted or hashed before they leave your phone.
Google knows, only if you turn wake push on, that a content-free wake ping was sent. It can never know the sender, the text, or how many messages.
Someone holding your phone knows that an app is installed. They can never know anything without the password. A wrong password is indistinguishable from an empty app, and a duress PIN shreds everything.
Google's data safety label lists "User IDs" and "Device or other IDs": those are the username hash and the optional wake push token described above. Nothing else.
BUILT IN
• Self-destruct: per-message or per-chat timers that start when the recipient actually reads, and count down on both phones together.
• Screenshot shield: screenshots and screen recordings of the app come out black. If a peer tries anyway, you're told, and the thread can burn on both ends.
• Delete for both: retract a message from both phones. It only happens once the other side is reachable, never silently just for you.
• Duress PIN: a second password that wipes everything and presents a fresh, empty app.
• Dead-man switch: if the app isn't opened for 7, 30 or 90 days, it wipes itself.
• Safety numbers: verify a contact in person, or scan each other's code to add and verify in one step. Key changes are flagged.
• Desktop link: read and reply from a browser while your phone keeps the keys. The browser never holds keys; lock your phone or close the app and the link dies with it.
• Tor and proxies: route every connection through a SOCKS5 proxy. If the proxy is down, the app stays offline rather than leaking your address.
• Encrypted backup: move to a new phone with a passphrase-protected backup file. Nothing is ever backed up to us.
• What it sends: text, emoji, voice notes, images and files. No video, no calls, by design.
PyroChat is free. There is no subscription and nothing to buy.
The app's source code will be published under the AGPL, so anyone can read exactly what it does with your keys.
PyroChat is not affiliated with or endorsed by Signal Messenger, LLC, whose libsignal library provides the encryption.
Requires Android 10 or newer. Phones only.
Encrypted messaging that leaves no trace. No phone number, no history, no logs.
Updated on
Safety starts with understanding how developers collect and share your data. Data privacy and security practices may vary based on your use, region, and age. The developer provided this information and may update it over time.
- No data shared with third partiesLearn more about how developers declare sharing
- This app may collect these data typesPersonal info and Device or other IDs
- Data is encrypted in transit
- You can request that data be deleted
What’s new
Voice changer: send a voice note in a deep, high or robot voice. The change is made on your phone before the note is encrypted. It is a disguise, not a guarantee.
The app now reconnects by itself when the network comes back, with no "try again" tap.
A message, retry or delete-for-both that is under way now finishes even if you close the chat.
Feedback: hello@pyrochat.ca
The app now reconnects by itself when the network comes back, with no "try again" tap.
A message, retry or delete-for-both that is under way now finishes even if you close the chat.
Feedback: hello@pyrochat.ca
App support
About the developer
9434-2334 Québec Inc
contact@zeemsg.com
222-13285 boul du Curé-Labelle
Mirabel, QC J7J 1H1
Canada
+1 514-248-4674