ENCLAY Encrypted Chat+Firewall

ARPSyndicate

About this app

Cut off whoever's listening. Talk to whoever you trust.

ENCLAY is one app with two tools for people whose phone may be working against them: a firewall that stops stalkerware and spyware from reporting back, and an encrypted chat with no server, no phone number and no account.

━━ FIREWALL (ON-DEVICE VPN) ━━
Stalkerware is sold as "monitoring" and installed by someone with access to your phone. It hides its icon, but it always has to send what it collects somewhere. ENCLAY stops it there.

• Blocks connections to 3 million+ known spyware, stalkerware, banking-trojan and malware domains and 76,000+ IP ranges, refreshed every 8 hours
• Finds known stalkerware apps by package and signing certificate (646 apps from 158 vendors), even before they send anything
• Flags apps that check in on a timer, new destinations right after a camera, microphone or location grant, and apps that can draw over others (overlay attacks)
• Safety Check: what needs your attention, in plain words
• Check a link: see every request a link makes before you open it
• Safety report: export your findings as a PDF for a shelter, a lawyer or the police
• Live feed, per-app history, one-tap rules for apps, hosts and countries
• USB lockdown, quiet hours, Quick Settings tile

How the VPN is used: ENCLAY uses Android's VpnService only to inspect your phone's own traffic on the device and block connections to known malicious servers. There is no VPN server: your traffic is not routed through ENCLAY or anyone else, and nothing about it leaves your phone. It is not an anonymity VPN and does not hide your IP address.

━━ ENCRYPTED CHAT ━━
Most messengers pass every message through a company's servers. ENCLAY has none.

• No server, no phone number, no email, no account
• Messages go straight from your phone to theirs over a private Tor address that only that contact can open
• Signal's protocol with post-quantum keys (PQXDH and the Double Ratchet), with sealed, padded envelopes
• Contacts are added only in person, by scanning an ENCLAY code. Nobody can message you unless you've met
• Safety codes to verify nobody is in the middle
• Disappearing messages, from 5 minutes to a week
• Nearby: with no internet, messages travel phone to phone over Bluetooth
• Appear offline, a fingerprint lock for Messages, and no screenshots of chats

━━ SAFETY FIRST ━━
• Stealth mode turns the home-screen icon and name into a plain calculator
• Notifications never show a message or a contact's name
• ENCLAY never uninstalls an app for you: removing stalkerware can alert whoever installed it. It cuts the app off and keeps the evidence first, then walks you through safe removal
• Tamper check: ENCLAY warns you if its own copy has been modified

━━ WHAT IT ISN'T ━━
We'd rather say it plainly:
• Not an antivirus, and not an anonymity VPN
• No backups: if you lose your phone or reinstall, your chats and keys are gone, by design
• It can't protect a phone that someone else can unlock. If they know your PIN, change it
• Chats are one-to-one for now. Where Tor is blocked, only Nearby works
• Not an emergency service. If you're in danger, contact your local emergency number

━━ PRIVACY ━━
Everything runs on your phone. We run no servers, there's no account, no ads and no analytics, and we can't see what you do. The only download is the threat list. Chat traffic goes over Tor or Bluetooth directly to your contacts.

Permissions, and why:
• VPN: the on-device firewall described above
• Bluetooth / Nearby devices: Nearby messaging, only while you turn it on (Android 10–11 also require location for Bluetooth; ENCLAY never uses it)
• Camera: scanning a contact's code in person
• Notifications and foreground services: to keep protection and messaging running, always with a visible notification you can turn off

Available in English and Hebrew.

A joint project of NCSAI C3IR and ARPSyndicate.
Questions or a security issue: [e-mail]

What’s new

A feature release. ENCLAY becomes Encrypted Chat & Firewall: the firewall is unchanged, and a private messenger is added beside it. There is no server. Phones deliver straight to each other over Tor onion services, or over Bluetooth when there's no internet.