{"package_name":"io.github.digitalvalut.logos","name":"DigitalValut Logos","summary":"Encrypted peer-to-peer chat and calls. No account, no server, no phone number.","category":"Messaging","icon_url":"/api/icon/io.github.digitalvalut.logos","latest_version_code":72,"latest_version_name":"72","apk_url":"/api/apk/io.github.digitalvalut.logos","apk_size":2551281,"apk_sha256":"4c7593b17cac97380a05785dca9416e0809396236382e679f70f2fb5f8a36aff","source_kind":"fdroid-repo","repo_slug":"fdroid-main","last_updated":1793851246,"release_timestamp":1793758621,"description":"Peer-to-peer encrypted chat, voice and video calls, and file sharing — directly\nbetween two devices, with no account, no phone number, and no server that ever\nsees a message.\n\nTwo browsers negotiate a private WebRTC connection and talk to each other\ndirectly. A small relay only ever helps them find each other and, when an\nunusually strict network requires it, forwards traffic that is already\nencrypted and which it has no key to read. There is no database anywhere\nholding conversations.\n\nThe relay is a Cloudflare Worker run by the project\n(digitalvalut-turn.burbeng78.workers.dev); the connection helpers (STUN/TURN)\nare Cloudflare's (stun.cloudflare.com, turn.cloudflare.com). The relay address\nis fixed in the app. Its source is in the same repository (turn-worker/), so\nanyone can run their own, but using it means rebuilding the app.\n\n<b>How you reach someone</b>\n\nA permanent address (DV-XXXX-XXXX-XXXX) is the SHA-256 hash of a key pair\ngenerated on the device, so it verifies itself: whoever dials it fetches the\npublished key, checks that it really hashes back to the address dialled, and\nonly then trusts it. A substituted key produces a different address and is\nrejected. Up to eight throwaway addresses can be held alongside the permanent\none, each revocable on its own.\n\nYou can also connect by a tappable invite link, or by scanning a QR code in\nperson.\n\n<b>Knowing who you are really talking to</b>\n\nThe first time you connect to someone, both sides see the same three-word\nsecurity code, derived from the actual cryptographic handshake — the same\nprinciple used by ZRTP-based secure calling. Read them aloud once; if they\nmatch, nobody is sitting in the middle. That check is bound to the other\nperson's cryptographic fingerprint, not to a display name.\n\n<b>What it does</b>\n\n• Text, emoji, voice messages, photos, video and files up to 512 MB, sent\n  uncompressed at original quality\n• Photos have their embedded GPS location, device model and software metadata\n  stripped on-dev","categories":["Messaging","Voice & Video Chat"]}