ANCROM vs Discrio

ANCROM - Private Messaging ANCROM is a messenger for people who want their conversations to stay between them and the person they are talking to. No phone number, no email address, no address book upload. SECURITY BUILT ON STANDARDS End-to-end encryption with post-quantum protection Messages are encrypted on your device and can only be read by your contact. Keys are agreed using a hybrid method that combines ML-KEM-1024 and elliptic-curve cryptography (P-384), so conversations stay protected even against future quantum computers. Messages are encrypted with AES-256-GCM. A fresh key for every message Keys change with every message (forward secrecy). Even if a key were ever exposed, earlier messages stay protected, and the conversation recovers on its own. Sealed Sender Each message is encrypted as a whole before it leaves your device. Our relay servers only learn where to deliver it - not who sent it. Verified contacts Add contacts by scanning their QR code in person. Far apart? One of you creates a one-time code and reads it out, for example on a phone call; the other types it in. Both phones then show the same six-digit number - compare it before you confirm. You can also compare a safety number in the chat at any time. If a contact's security key ever changes, ANCROM warns you and pauses the conversation until you verify again. NOTHING STORED THAT ISN'T NEEDED Short-lived relay storage Our servers only pass messages on. A message is held until your contact's device confirms it, for at most 24 hours, and then deleted. Your data stays on your device Chats are stored only on your phone, in an encrypted database protected by your password. No cloud sync, no server-side history. Protected sign-up No phone number, no email address, no personal information required. Clean photos Location, camera details and other metadata are removed from images before sending. PROTECTION ON YOUR DEVICE - Screenshot protection - Auto-delete for messages - Duress PIN and panic button to wipe your data instantly - Detection of jailbroken or manipulated devices Only people you add can reach you. Messages from strangers are not shown until you add them yourself. GOOD TO KNOW Your privacy comes with responsibility: because nothing is stored in the cloud, your chats are gone if you delete the app or lose your device. There is no recovery, by design. SUBSCRIPTION You can use ANCROM free of charge for a few days to get to know it. After that, an auto-renewable subscription is required, starting with a 7-day free trial. - Price: $19.99 per month - Payment is charged to your Apple ID upon confirmation. - The subscription renews automatically unless cancelled at least 24 hours before the end of the current period. - Manage or cancel your subscription in your Apple Account settings. We do not show ads and do not sell data. The subscription pays for the service. Terms of Service: https://ancrom.com/terms.html Privacy Policy: https://ancrom.com/privacy.html Support: support@ancrom.com Developed in Germany.

No account. No phone number. Nothing to sign up for. Two phones agree to talk by showing each other a code once. After that only those two phones can read what passes between them, and there is no account anywhere to leak, demand, or hand over. NOBODY CAN FIND YOU There is no directory, nowhere to search, and no address that leads to you. You start a conversation by showing someone a code in person, or by sending an invitation link that works once and expires after 24 hours. THE SERVER HAS NOTHING TO GIVE UP Messages pass through a relay holding encrypted blocks — every one exactly 8192 bytes, so size says nothing — under random names tied to no one. No user table, no record of who talks to whom. Blocks are deleted when collected, and expire after 21 days regardless. Tap the byte count under any message and see exactly what the server saw. BUILT TO STAY UNREADABLE X25519 with ML-KEM, the post-quantum standard, and the Double Ratchet, through libsignal — the audited open-source library behind them. Your text is padded to 4096 bytes before encryption, so even the ciphertext length gives nothing away. A message captured today stays unreadable when quantum computers arrive. Compare the sixty safety digits once and you know nobody came between you. If a contact's key ever changes, sending stops until you confirm. FOR THE MOMENT SOMEBODY IS HOLDING YOUR PHONE You choose two passphrases. One opens your conversations. The other opens an app that looks identical, holding ordinary, unremarkable ones. Nothing reveals which you typed: no alarm, no notification, not one second of delay. A third, optional passphrase destroys everything, then opens that same quiet app. Every conversation has a panic hold: press the name at the top and you are on the other side instantly. No button exists to give it away, and coming back needs the passphrase. The app also re-locks on its own — immediately, after a minute, five, an hour, or never. AGAINST THE CAMERA IN THE ROOM Screenshots come out blank. Screen recording and mirroring too. Captures work only where both of you allowed them: your messages sit on the other phone too, so a choice one of you makes alone protects nothing. Allow them and the other person is told the moment you take one. For a second phone pointed at your screen, camera mode opens a message only under your finger. Deniable wording bends the spelling on the way out so a photograph cannot quote you, leaving numbers, times and addresses as typed. Agreed words let one word stand for another, the meaning never reaching the screen. A watermark says which phone a leaked screenshot came from. MESSAGES THAT GO A timer per conversation: gone when you leave it, an hour, a day, a week, a month, or never. Counted from when a message is sent, not read. A ghost message is stronger. Read once, for three to thirty seconds, and then it exists on neither phone. Ghost messages never touch the disk, and a ghost photo can never be captured, whatever either of you allowed. Photos are encrypted on your phone and padded to one of five fixed sizes. NO INTERNET, NO PROBLEM Turn on nearby delivery and a message crosses the room directly — over Wi-Fi, or over the radios if there is none. It works with the internet cut off, and no third party sees the timing, the volume, or that anything was said. WHAT WE WILL NOT PRETEND Any server sees where a connection comes from. We do not log it, but that is a policy, not mathematics: use a VPN or Tor if you need to hide that you use Discrio at all. No software can stop somebody photographing your screen with a second phone. It raises the cost, not the impossibility. Forget your passphrase and your conversations are gone. Nothing is kept from which they could be rebuilt. That is the design, and the one thing that cannot be softened. Notifications say only "New message" — never who, never what — and can be turned off. 17 languages. No accounts, no analytics, no advertising, no third-party code.