Signal Protocol (E2EE)
X3DH + Double Ratchet. AES-256-GCM per message. Complete forward secrecy — compromising one key does not expose previous messages.
Privacy · E2EE · Zero Storage
Dinucci Direct
Messages that exist only while both are online. No server, no history, no trace.
←
M
Marco R.
Online
🔒
E2EE · Signal Protocol · Zero Storage
Encrypted message...
➤
The Problem
Every message you send is stored on a server you do not control
WhatsApp, Telegram, Signal — they all store metadata. Who talked to whom, when, how often. Even with end-to-end encryption, the server knows the conversation existed.
Dinucci Direct removes the server from the equation. Messages are transmitted via pure relay: if the recipient is not online, the message is rejected. No queue, no cache, no disk. When both disconnect, the conversation ceases to exist — including on the device, with per-second self-destruct timers.
Your identity is a locally-generated Ed25519/X25519 key pair. No phone number needed, no email needed. Contacts are added via QR Code, in person.
Architecture
3 steps to traceless communication
Every architectural decision follows a single premise: when privacy and convenience conflict, privacy wins.
01
Key Exchange
X3DH + Double Ratchet (Signal Protocol). New AES-256-GCM keys generated per message. Forward secrecy guaranteed.
02
Pure Relay
Server as relay only. Offline = message rejected. Nothing on disk, nothing in persistent memory. No queues, no logs.
03
Self-Destruct
Configurable timers from immediate to 24 hours. Per-second verification. Messages deleted on both devices simultaneously.
Features
9 pillars of absolute privacy
Each pillar was designed to eliminate a surveillance vector. This is not about trusting the server — it is about eliminating the server as a point of failure.
Zero Storage
Server as pure relay. Recipient offline = message rejected. Nothing on disk, nothing in persistent memory, nothing in logs.
Phone-Free Identity
Locally-generated Ed25519/X25519 keys. Contacts added via in-person QR Code. No phone number, no email, no traceable identity.
Self-Destruct
Timers from immediate to 24 hours. Per-second verification. Simultaneous deletion on both devices. No trace left.
Encrypted Calls
Voice and video via WebRTC + SRTP. Direct P2P connection. Self-hosted TURN servers for NAT traversal.
Ephemeral Groups
Up to 50 members. Auto-dissolve in 24 hours. Sender Keys with automatic per-member rotation.
Anti-Capture
FLAG_SECURE on every screen. Panic button. Configurable auto-lock. Root detection and compromised environment checks.
Encrypted Database
SQLCipher with AES-256-CBC. Key derivation with Argon2id (64 MB, 3 iterations). Local data protected even with physical access.
10 Languages
Portuguese, English, Spanish, French, Russian, Japanese, Chinese, Arabic, Hindi, Bengali. Native interface in each language.