TalkOnce
Post-quantum private messenger

The message no one
else can read.
Not even us.

Everything you send — messages, calls, stories, photos — is sealed on your device and opened only on your recipient's. No phone number. No email. No name. We hold no keys and can't read your content even if compelled.

Coming to the App Store See how it's protected

No tracking. No targeted ads. No third-party analytics or ad SDKs — anywhere in the app.

Why TalkOnce

Privacy that holds up — even against a quantum computer.

Most encrypted apps protect you against today's attacker. TalkOnce is built for the one recording your traffic now to break it later.

Unreadable. By anyone.

Post-quantum end-to-end encryption on every message, call, story, and file — from the very first hello.

No number, no name

Sign up with nothing. Connect by invite link or QR code. There is no account profile to leak, subpoena, or sell.

Nothing lingers

Delivered messages are erased from our servers the moment they reach you. Anything undelivered expires within 30 days.

No tracking, ever

No ad networks, no analytics, no trackers, no data profiles. We never make money from knowing you.

Everything you'd expect — privately

A full messenger. Nothing watching over your shoulder.

Chats, groups, channels, calls, stories, GIFs, polls — the complete modern experience, without the surveillance underneath it.

Chats, groups & channels

Private conversations, groups up to 1,000 members, and broadcast channels with invite links and QR codes — all end-to-end encrypted.

Voice & video calls

Crisp one-to-one and group calls, end-to-end encrypted. If a call can't be encrypted, it doesn't connect. Period.

Stories

Share a moment that's gone in 24 hours — encrypted to your audience, never mined for a profile.

Disappearing messages

From 30 seconds to 4 weeks — or set your own custom timer. Messages erase themselves on both ends.

Media, made beautiful

A fast picker with batch sending and albums, an editor to draw, caption, and crop — and GIF search that never reveals who's searching.

Blackout mode

Flip one switch and everything routes over Tor with cover traffic and size padding — even the shape of your messaging is concealed.

Duress, panic & decoy

A duress passcode that opens a believable decoy account, and a panic passcode that wipes everything — for the moment someone forces you to unlock your phone.

Zero-knowledge backup

Optional. Encrypted on your device with a passphrase only you hold — restore to a new phone without trusting anyone, including us.

Voice notesReactionsMessage editingDelete for everyonePollsEvents & RSVPsLocation pinsMessage searchStarred & pinnedScreenshot blocking & alertsRead-receipt & typing controlsLinked iPad & MacChat wallpapersReorderable tabs
You choose the trade-off

Three levels of privacy. You decide.

Every level is end-to-end encrypted. Higher levels trade a little convenience for less metadata — your call, changeable anytime.

Standard
The everyday experience — instant, effortless, still fully encrypted.
  • Post-quantum E2E encryption
  • Instant push notifications
  • Full speed, full features
Shielded
Tighten the metadata footprint while keeping the app fast and usable.
  • Everything in Standard
  • Reduced profile sharing
  • Hardened at-rest posture
Blackout
Maximum concealment for when it truly matters.
  • All traffic over Tor — your IP hidden
  • Cover traffic & size padding
  • Verify-before-first-message gate
For the people who ask

Built to be checked, not trusted.

Hybrid post-quantum cryptography, sealed-sender envelopes, invite links our servers can't read — and a plain-language ledger of exactly what our servers can and can't see.

Explore the security

Say it once. Trust no server with the rest.

TalkOnce is arriving on the App Store, with Android to follow. Privacy will always be free.

Coming to the App Store Questions? Read the FAQ