Pravida app icon
🔒 Invite-only · End-to-end encrypted · Works with no internet · iPhone, iPad, Mac & Apple Watch

Private. Encrypted. Offline.
A messenger for the people you actually know.

Create a chat, invite people with a link or a QR code, and talk. Every message is encrypted on your device with keys that never leave it, relayed through iCloud when there is internet, and sent directly between nearby devices over Wi‑Fi when there is not. Nothing to sign up for, nothing to hand over.

no account·no phone number·no server of ours

In TestFlight, App Store to follow.

iPhone iPad Mac Apple Watch End-to-End Encrypted Invite-Only Wi‑Fi Mesh iCloud Relay On-Device Intelligence
Private

Who can read it?

The people in the chat, and no one else. Every message, photo, file and voice note is encrypted on your device with AES‑256‑GCM before it goes anywhere. The keys are generated on the device and kept in its Keychain. Prava Labs runs no servers and holds no keys.

Offline

Does it need the internet?

Not for the people near you. Members on the same Wi‑Fi network, or within peer‑to‑peer Wi‑Fi range, exchange messages directly between their devices: no cell service, no hotspot, no server. When the internet is back, iCloud carries the rest.

Everything a Messenger Should Do

Laid out like Messages, so nobody has to learn it. Encrypted underneath, so nobody has to think about it.

🎟️

Invite-Only Chats

Nobody joins a chat without an invite from someone already in it. Share a link or show a QR code; invites expire on a schedule you choose, from an hour to 30 days. Owners and admins promote, demote, remove and block.

💬

The Essentials

Replies, reactions with any emoji, forwarding, copy, typing indicators, delivery and read receipts, link previews, and keyword search across every chat with the match highlighted. Receipts and typing are each a switch you control.

📎

Photos, Files and Voice

Photos, videos, documents and voice messages, each encrypted with its own key before it leaves the device. View‑once photos are gone after one look. Share into a chat from any other app.

💨

Disappearing Messages

From 5 seconds to a week. Expired messages are deleted on every member's device, and “delete for everyone” does what it says.

🛡️

Verify Who You Are Talking To

Every member has a safety number and a QR code. Compare them in person and mark the member verified. If a member's identity key ever changes, everyone in the chat is told before they send another word.

🔐

App Lock and Privacy Cover

Face ID, Touch ID or Optic ID before the app opens, and a cover over your chats in the app switcher. On iPhone and iPad; the Mac keeps its own lock.

📸

Screenshot Alerts

When someone screenshots a chat on iPhone or iPad, the other members are told. It is detection, not prevention: no platform can block a screenshot, and the page will not pretend otherwise.

💾

Encrypted Backup

Back up a chat's settings and member roster to a file encrypted with the chat's own key, and restore it on another device. Message history can be exported as encrypted metadata; the text itself stays where it was written.

How It Works

Four steps, and the first one is the whole sign-up.

1

Open It

The app generates a cryptographic identity on your device the first time it runs. That is the account. Pick a name in Settings if you like; nothing is registered anywhere.

2

Invite

Create a chat and share an invite link, or show the QR code to someone standing next to you. The link is the key to the door, so hand it over the way you would a key: in person, or over a channel you trust. It expires when you say.

3

Talk

Messages go straight to nearby members over Wi‑Fi and through iCloud to everyone else, whichever is available, both at once. A member who is unreachable gets the message when they come back.

4

Verify

Compare safety numbers with a member in person and mark them verified. From then on, a changed key raises an alert and clears the badge until you have checked again.

“Two phones, one Wi‑Fi, no internet. The message arrives.”
Pravida's own line. Nearby members talk directly over Apple's peer‑to‑peer networking, encrypted twice: once by the session, once by the app. The relay is for the people who are not in the room.

What Leaves Your Device, and in What Form

Encryption is not a mode you switch on. There is no unencrypted mode. This is exactly what each thing looks like once it has left your phone.

WhatHow It Travels
Message textCiphertext — AES‑256‑GCM, under a key derived for the chat and the recipient
Photos, videos, files, voice notesCiphertext — each attachment under its own AES‑256‑GCM key
Reactions, receipts, deletionsCiphertext — the same envelope as a message
Your keysNever — generated on the device, kept in its Keychain; there is no key server
Your display name and an app-generated idReadable — so members can find you; there is no phone number, email or real name to leak
Who messaged whom, and whenReadable by the relay — iCloud needs sender, recipient, chat id and time to deliver a record. It never sees content

Everything is CryptoKit: Curve25519 identity keys, HKDF‑SHA256 key derivation, AES‑256‑GCM. Standard algorithms, no proprietary cryptography, nothing invented here.

0Servers Prava Labs runs. The relay is your own iCloud; nearby messages never touch a server at all
AES‑256GCM, on every message and every attachment, before it leaves the device
1 h – 30 dHow long an invite link lives, chosen when you make it
5 s – 7 dDisappearing-message timers, deleted on every member's device

Does it need the internet? Only for the people who are not nearby.

Both transports run at the same time. When a member's device is reachable over Wi‑Fi, the message goes there directly and wins; otherwise it goes through iCloud; if neither is available, it waits and goes when one is.

WhatNeeds the Internet?
Messages to members nearbyNo — direct over Wi‑Fi: the same network, or peer‑to‑peer Wi‑Fi between the devices
Creating a chat, an invite, or scanning a QR codeNo — it all happens on the device
Smart replies, summaries, translationNo — Apple's on-device model; nothing is sent anywhere
Reading what you already haveNo — your chats live on your device, not in a cloud you fetch from
Messages to members elsewhereYes — relayed through iCloud, encrypted; an iCloud account signed in is all it takes
Apple WatchYes — the Watch talks to iCloud only; nearby-only messages reach it once they are relayed

Nearby means Wi‑Fi. Pravida does not use Bluetooth, and messages do not hop from device to device to reach a third; each member is reached directly or through iCloud.

Every Apple Device, Laid Out Like Messages

Native SwiftUI on each platform, following the Human Interface Guidelines rather than fighting them.

📱

iPhone

Messages, Mesh and Settings in three tabs. App Lock, the privacy cover, screenshot alerts and the QR scanner live here. Everything works with the screen off, including the notifications that let you reply inline.

🖥️

iPad and Mac

One Messages-style window: the chat list beside the chat. On the Mac it is a native, sandboxed app with keyboard shortcuts for Mesh and Settings, not a phone app stretched to fit.

⌚

Apple Watch

A standalone Watch app that shares your iPhone's identity, so members see one of you. Read, dictate, send a voice message or a tapback from your wrist, with an unread-count complication.

🧠

On-Device Intelligence

On devices with Apple Intelligence, Pravida suggests replies, summarises what you missed and translates messages, entirely on the device. A sentiment check catches a message you might regret before it sends. One switch turns all of it off.

What Pravida Is Not

It is not a Signal‑protocol messenger. Pravida uses Apple's CryptoKit with standard algorithms, and a message can only be read by the members it was encrypted for; but it does not yet have forward secrecy, so a key that leaks later would expose earlier messages under it. That work is on the roadmap, and this page will change when it lands.

The right mental model: the invite link is the key to the chat. Anyone who holds it can join until it expires. Share it the way you would share a key.

It does not hide who you talk to from your own iCloud account: the relay sees ids and timestamps, never content. Screenshot alerts tell members a screenshot was taken; nothing can stop one. The Watch needs the iPhone app opened once and the same iCloud account. There are no voice or video calls, no message editing, and no Android or web clients in this build.