Risaal - Encrypted Chat

Every message you've ever sent lives on someone else's server.

Your "private" conversations sit in corporate databases. Your "encrypted" app holds the keys for you - which means they hold the keys for anyone who asks. Your metadata - who you talk to, when, how often - is collected, analyzed, and sold before you finish reading this sentence.

You already knew this. You just didn't have an alternative that actually solved it.

Risaal does.

Risaal is a messaging app built on one architectural principle: the server is blind. It relays encrypted data it cannot read, for users it cannot identify, through a protocol it cannot break. This isn't a policy. It's mathematics.

Your messages are encrypted on your device using the Signal Protocol with post-quantum extensions. The encryption keys exist only on your device - inside the hardware Secure Enclave, isolated from the operating system itself. When you send a message, our server receives a meaningless blob of bytes, delivers it, and forgets it existed. We cannot read your messages under any circumstances. Not by choice. By design.

Even if our servers were seized tomorrow, the only thing found would be encrypted noise. No names. No conversations. No social graph. Nothing.

WHAT MAKES RISAAL DIFFERENT

Most "secure" apps encrypt your messages but still know everything about you - who you talk to, when you're online, where you are. Risaal eliminates this layer by layer:

Double Ratchet Protocol - every single message gets a unique encryption key. Compromise one, the rest remain sealed. Past messages stay untouchable. Future messages stay unknowable.

Post-Quantum Cryptography - today's encryption protects you today. Risaal's hybrid Kyber-768 + X25519 key agreement protects you from tomorrow's quantum computers. Your conversations are future-proof.

Sealed Sender - the server delivers your message without knowing who sent it. No social graph. No communication patterns. No trace.

Zero-Knowledge Architecture - we cannot read your messages, see your contacts, or access your files. A court order to Risaal produces nothing, because we have nothing.

Anti-Forensics - keys are zeroed from RAM when the app goes to background. Panic wipe erases everything instantly. A duress PIN silently destroys all data while appearing to log in normally.

FEATURES

· End-to-end encrypted text, voice messages, photos, videos, and files
· Encrypted voice and video calls routed through relay servers - your IP stays hidden
· Disappearing messages with custom timers - overwritten, not just deleted
· Group chats up to 50 members, individually encrypted per participant
· Multi-device sync across 5 devices through encrypted channels
· No phone number required - your identity is a cryptographic key, not a SIM card
· Encrypted vault for sensitive file storage
· Safety numbers for contact verification - verify with a 60-digit code or QR scan
· Open source client — every cryptographer on earth can audit our code

WHO RISAAL IS FOR

Risaal is for anyone who believes their conversations are theirs alone.

Journalists protecting sources. Lawyers preserving privilege. Healthcare professionals securing patient data. Businesses guarding trade secrets. Families keeping private matters private. And anyone who simply refuses to be the product.

You don't need a reason to want privacy. It's not suspicious to close your curtains.

TRUST, BUT VERIFY

We don't ask you to trust us. We publish our client source code for independent audit. We maintain a warrant canary - a signed statement every 30 days confirming no secret government orders. If it ever disappears, you'll know.

The strongest form of trust is one that doesn't require it.


Risaal means "message" in Arabic. We believe every message belongs only to the one who sends it and the one who receives it.

Privacy is not a feature. It's a right.