Private text & voice · By invitation only

The room that keeps no record.

A members-only line for one-to-one conversation. Messages live encrypted on your device — never in plaintext on any server, never readable by us, never sold to anyone.

Request an invitation How it works
ArchitectureEnd-to-end encrypted
On our serversCiphertext until read, then erased
RecoveryNo master key
01

What we will never do

— I

NORead your messages

The server only ever sees ciphertext. Keys never leave your device, so even we cannot decrypt a single word — by design, not by promise.

— II

NOKeep a backdoor

There is no master key, no admin override, no server-side recovery key. A compromised device can be revoked; the conversation cannot be reopened by anyone else.

— III

NOKeep encrypted data on our servers

Encrypted content is stored only until delivery or read, then removed. SECRET does not retain encrypted message data on its servers longer than necessary.

Privacy is not a feature you switch on. It is the entire premise.

SLN · SECRET
02

Access by introduction

01

An existing member recommends you

SECRET is closed. A member you trust submits your name with a relationship and a confidence note — family, business, or friend.

02

You activate approved access

Access is activated through approved onboarding, Apple App Store subscription, and device authorization.

03

Your device is approved

Each terminal is verified and named internally. A device that is lost or compromised is revoked — your conversations stay sealed.

04

You speak in private

One-to-one encrypted text and voice. Auto-lock after inactivity, read-once and burn options, and a key-change warning if anything about a contact changes.

04

SECRET iPhone Terminals

01

Available controlled iPhone terminals

SLN SECRET will offer private iPhone terminals prepared for one purpose: secure access to SECRET. Each terminal is configured manually, approved internally, and connected to the service as a controlled device.

02

App-first operating mode

The terminal is intended to operate with SECRET as the primary accessible application, with access to unrelated apps, settings and consumer features restricted as much as the managed device profile allows.

03

Internet through SIM only

The terminal is configured for mobile data through a SIM card only. Wi-Fi access is disabled in the managed profile to reduce exposure outside the approved network path, keeping the experience focused on encrypted text and voice communication inside SECRET.

04

Revocation if compromised

If a terminal is lost, modified, jailbroken, physically compromised or removed from its managed state, access can be revoked from the SECRET system. Privacy is strengthened by device control, not by trust alone.

Our SECRET terminals

Available by approval
iPhone supervised
MDM enrolled
SECRET installed
Single App Mode / kiosk mode
Only SECRET accessible
Settings access restricted
SIM mobile data only
Wi-Fi access not provided
Personal Hotspot changes blocked
Camera disabled
Photos inaccessible
iCloud Photos disabled
Screenshots disabled
Screen recording disabled
AirPlay / screen sharing disabled
AirDrop disabled
iMessage disabled
FaceTime disabled
Siri disabled
Safari disabled
Apple Music / Radio disabled
App installation disabled
App Store disabled after activation
App removal disabled
In-app purchases disabled after activation
App tracking requests blocked
Personalized ads disabled
iCloud backup disabled
iCloud documents & data disabled
iCloud Keychain disabled
Shared Albums disabled
Managed app iCloud storage blocked
Unmanaged document sharing blocked
USB pairing restricted
USB accessories while locked disabled
Network drive access disabled
Account changes restricted
Bluetooth settings changes restricted
Device name changes restricted
Passcode changes restricted
Find My changes restricted
Wallpaper changes restricted
Untrusted certificates blocked
Enterprise app trust blocked
Configuration profile installs blocked
Encrypted backups forced
Automatic date & time forced
Remote wipe enabled
Device tied to SECRET license
Server revokes invalid device
Manual approval required
Only SECRET. Nothing else.
Panic Wipe

Emergency wipe for total account lockdown.

SECRET includes a Panic Code flow for situations where access must be destroyed fast. Once executed, the account is disabled and anonymized, active sessions are removed, approved device records are revoked, and linked encrypted data records are purged from the server.

Read-once server state Messages remain on the server only as ciphertext until they are read. After read, they are erased.
Server wipe Sessions, approved devices, encrypted message records, encrypted media records, contacts, invitations and push tokens are removed.
Device wipe The local vault, session state and sensitive local cache are cleared on the device after the panic flow is executed.
Panic Wipe does not uninstall the app from iOS. It locks down the account, removes server-side account links, and destroys the local access material needed to open the vault on that device. SECRET does not use a master key, so wiped local keys cannot be rebuilt by the server.
03

The quiet engineering

Every message is sealed with modern end-to-end encryption with forward secrecy and post-compromise security — fresh keys per conversation, ratcheted per message. Voice notes are encrypted locally with a one-time key before they ever touch the network.

Your private keys are held in a hardened local vault, protected by your passphrase and biometrics, with no cloud backup and no server recovery. What stays on the device, stays on the device. Inside the app, screenshot and screen recording protection helps reduce unauthorized capture on supported iOS devices.

TransportHybrid handshake · ratchet
At restLocal vault · AEAD
Server holdsCiphertext + minimal meta
CaptureScreenshot + recording guard
VerifyPer-contact fingerprint
Launched · 26 June 2026
Download on the Apple App Store