Shadow Protocol
APPEIRON app — Chats
Interactive phone
APPEIRON — Contacts
Contacts
APPEIRON — Polls & calendar
Polls & calendar

Tap tabs · open Ozi · real app screens

APPEIRON — Security Health
Security Health
APPEIRON — Attach menu
Attach menu
APPEIRON — Group call
Group call
APPEIRON — Calendar note
Calendar note
SHADOW PROTOCOL V16

Your messages are encrypted.
But is your encryption healthy?

The messenger that doesn’t just lock your conversations — it proves the lock still works. Live entropy verification, post-quantum encryption, VoiceGuard voice indicators, and Guardian protection — on your device.

Base from $3.99 · 7-day trial on subscriptions · No ads · No tracking.
PQ hybrid E2E · VoiceGuard · Guardian · Shamir recovery · TURN-secured calls
↓ Scroll
The problem

Every messaging app has a blind spot.

Every encryption key starts with random numbers. If those numbers aren't truly random, your encryption is silently compromised.

2008
Debian OpenSSL

Two years. Millions of servers. Only 32,768 possible keys.

Nobody noticed.
2019
Qualcomm HWRNG

Hundreds of millions of Android phones. Hardware RNG degraded silently.

Nobody noticed.
2015
Juniper Dual EC

NSA backdoor in network equipment. Generator looked perfectly random.

Nobody noticed.

Shannon entropy — the industry standard — reports 7.999 out of 8.000 for all of them.

Perfect score. Catastrophic security.

The solution

We don't just encrypt.
We verify.

Every byte of randomness passes through four independent quality tests — continuously, in real time, on your device. If anything degrades, you know immediately. Not in two years. Now.

No other messaging app does this.

The proof

What Shannon entropy misses,
APPEIRON catches.

GeneratorShannonVerdictPL (engine)Verdict
OS /dev/urandom7.999✓ Passz = +0.3✓ Healthy
IBM RANDU (1969)7.999✓ Passz = −301⚠ Critical
16-bit LFSR8.000✓ Passz = −328⚠ Critical
glibc rand()7.999✓ Passz = +4.6⚠ Critical
Shannon: “Everything looks fine.”
APPEIRON: “Three of these will get you hacked.”
Features

Everything you expect.
Plus everything you didn't know you needed.

🔒

📞

🎤

📝

🛡

📡

📷

🎬

🌐

📊

🖥

🛡

🏢

🗃

Security Health

Security you can see.

Most apps show a lock icon. APPEIRON shows the actual health of your encryption engine — because a lock means nothing if the key was generated from weak randomness.

Entropy Health: Excellent
PL Test✓ Passed
Gap Spectrum✓ Normal
AR Liveness✓ Active
PQ Ready✓ All algorithms
Last check: 2 minutes ago · Alerts today: 0
Your device. Healthy.
Entropy Health: Degraded
PL Test⚠ z = +3.8
Gap Spectrum✓ Normal
AR Liveness✓ Active
PQ Ready✗ ML-KEM at risk
⚠ Unusual patterns detected. Recommend restart.
Something changed. You know instantly.
Teams & Protection

Built for families, teams, and people who take security seriously.

From a trusted circle of two to an entire organization — APPEIRON scales privacy without selling your data.

Team Admin Panel

Create your organization in-app, generate APEIRO-ORG codes, and onboard members in seat packs. One code activates Team for the whole group.

Relay Preset & Lock

Point every team member at the same relay URL automatically. Lock it so nobody drifts to an unknown server — your infrastructure, your rules.

Guardian Protection

Invite someone you trust to be your Guardian. Silent alarm, encrypted location on demand, and automatic alerts when a call shows sustained stress or voice mismatch.

Encrypted Backup Relay

Server stores only ciphertext. Shamir shards split the vault key across contacts you choose. Lose a phone — recover with shards, not with us reading your data.

5
Subscription
tiers
13
Languages
in-app
0
Ads or data
selling
100%
On-device
voice analysis
Plans explained

One app. Five levels. Clear boundaries.

APPEIRON is a privacy messenger for individuals and organizations. Subscriptions unlock features — they are not separate apps. Team is an organizational layer on top of Pro+; Groups are how people chat together.

How to choose your plan

Follow the path that matches what you need. One app — five levels.

Team and Guardian both build on Pro+ — they are parallel branches, not “one includes the other”.

Product model (for reviewers & IT buyers)

Group vs Team — not the same thing

Feature Group (chat) Team (organization)
PurposeEncrypted conversation & group callsCompany membership, licenses, relay policy
Who creates itAny user with contactsOrg admin (Team tier)
Add membersInvite contacts / share invite linkShare APEIRO-ORG code → redeem in app
Contacts required first?Usually yes (or invite link)No — directory sync adds org members automatically
Admin powersGroup admin: roster, invitesOrg admin: seats, relay preset, remove member
Group video callYes — group audio/video conference (3+, Pro+; any member can start)Via Groups (Team supplies people, not the call UI)
Relay controlEach user's relayOptional org-wide preset & lock
Base

Individuals, families, anyone starting out

E2E chat (PQ hybrid), 1:1 calls, groups, disappearing messages, Proof-of-Read (Seal), Entropy Health Monitor, Quantum Burn, 13 languages, anonymous ID, media editor

One-time $3.99. Full encryption. No ads. No data selling.

Quantum Vault and Mesh require Pro.

Pro

Power users who need secure storage and offline mesh

Everything in Base + Quantum Vault, Mesh/Nearby, DMS basics

Encrypted document vault and peer radar when infrastructure fails.

Pro+

Journalists, executives, high-risk personal use

Everything in Pro + duress PIN & decoy vault, advanced DMS / backup options, Tor path & Direct link, group conference (3+; any member can start), chat polls

Maximum personal protection and encrypted recovery without trusting us with plaintext.

Team

Companies, teams, NGOs — 5 to hundreds of seats

Everything in Pro+ + org admin, APEIRO-ORG codes, directory sync, relay preset & lock; screen share & polls

Onboard staff without QR scanning; optional managed relay or your own server (BYO).

Default: APPEIRON managed relay. Opt-out: admin sets your wss:// URL.

Guardian

Families / partners needing mutual protection

Everything in Pro+ + Guardian (silent alarm, consent location, VoiceGuard, optional stress auto-alarm) — no Team org admin; screen share in calls

Family protection without surveillance. VoiceGuard in calls. No company admin panel.

Cancelling subscriptions

Base is a one-time purchase ($3.99) via the App Store (iOS). Pro, Pro+, Team, and Guardian are auto-renewable App Store subscriptions. Cancel anytime in your Apple ID settings; the tier reverts when the subscription ends. Android billing will follow the Google Play release.

Pricing

Simple pricing. No ads. Ever.

Subscriptions include a 7-day free trial. Base is a one-time purchase ($3.99).

USD prices. Annual plans save ~2 months.

Available now
Base
$3.99 one-time
  • E2E encrypted chat (PQ hybrid)
  • E2E voice & video calls
  • Disappearing messages
  • Voice messages & media editor
  • Proof-of-Read certificates
  • Anonymous identity, 13 languages
  • Entropy Health Monitor
  • E2E groups (create & invite)
  • Quantum Vault
  • Mesh / Emergency
Get Base
Pro
$9.99 / mo
$79.99 / yr
7-day free trial
  • Everything in Base
  • Quantum Vault (multi-vault, search)
  • Mesh / Emergency (radar, peers)
  • Dead Man's Switch — basics
Get Pro
Pro+
$10.99 / mo
$119.99 / yr
7-day free trial
  • Everything in Pro
  • Duress PIN + decoy vault
  • DMS — encrypted server backup
  • Custom DMS message for recipients
  • Shamir shards — export, distribute & restore
  • Tor route & direct link preferences
  • Group audio/video conference (3+; any member can start)
Get Pro+
Team
$24.99 / mo
$249.99 / yr
7-day free trial
  • Everything in Pro+
  • Org admin panel — create team, seat packs
  • APEIRO-ORG codes for bulk member onboarding
  • Team relay preset & optional relay lock
  • Org directory — auto-contacts without QR
  • Screen share in Direct P2P calls
Get Team
Guardian
$19.99 / mo
$149.99 / yr
7-day free trial
  • Everything in Pro+
  • Guardian — mutual consent protection
  • Silent alarm + one-time E2E location
  • VoiceGuard in-call match & stress index
  • Auto-alarm on sustained stress (opt-in)
  • Shield icons in chats, contacts & calls
  • Screen share in Direct P2P calls
Get Guardian
Under the hood

Built on mathematics, not marketing.

39
Automated tests
all passing
32KB
Memory
footprint
O(1)
Per byte
constant time
0
False alarms
250 windows
Five-Layer Entropy Generation

L0: OS Entropy — Hardware RNG via operating system. Where every other app stops, we continue.

L1: Arithmetic Lattice — 64 primes form a 2D quasicrystal. Baker's theorem (1966) guarantees it never repeats. Shor's algorithm requires periodicity — no period, no attack.

L2: HKDF-SHA3-256 — Cryptographic extraction using SHA-3, not SHA-2. Different math foundation. Block size: 136 bytes.

L3: Hedging — Output = AR XOR HKDF. Either source strong = output strong. Both must fail simultaneously.

L4: Pool Feedback — HMAC-SHA3 ensures forward secrecy. Past outputs cannot be reconstructed.

Four-Level Runtime Monitor

Phase Locking (4 scales) — 8, 16, 24, 32-bit residue coverage. RANDU: z = −301. Shannon: 7.999. Memory: 32 KB.

Gap Spectrum — Temporal byte recurrence distribution. Catches what PL might miss.

Adaptive Threshold — Self-learning per-device baseline. Anti-poisoning. RAW_SAFE floor.

PQ Validator — Bias + correlation + block uniformity for ML-KEM, ML-DSA, SLH-DSA.

Encryption Stack

Symmetric: ChaCha20-Poly1305 • KDF: HKDF-SHA3-256 • Key exchange: X25519

Wire: 12B nonce || ciphertext || 16B tag • Pool: HMAC-SHA3-256 • Zeroize on Drop

Engine: Rust. Memory-safe. No garbage collector. 39 tests, 0 failures.

Post-Quantum Readiness

Entropy validated for all NIST PQ standards: ML-KEM-768, ML-DSA-65, SLH-DSA-128s.

Hybrid ML-KEM-768 + X25519 key exchange is live in every chat today. An attacker must break both layers.

The AR lattice is Shor-resistant by construction. Baker's theorem proves it has no period.

Calls & Relay Infrastructure

WebRTC + TURN: Encrypted calls use peer-to-peer WebRTC with our own TURN server. Default mode routes media through TURN so both IP addresses stay hidden.

VoIP Push: Incoming calls wake the app even when it is asleep — PushKit on iOS, encrypted signaling on the relay.

Encrypted Backup API: Relay stores ciphertext blobs only (POST /backup). Server never sees vault plaintext.

Team Relay Control: Admins can preset and lock the relay URL for all organization members.

Comparison

How APPEIRON compares.

SignalWhatsAppTelegramThreemaAPPEIRON
E2E EncryptionPartial
No Ads
Entropy Monitoring
PQ Readiness
Encrypted Vault
Mesh / P2P
Proof-of-Read Certificates
Caller Voice Verification
Dead Man's Switch
PQ Hybrid Key Exchange (live)Partial
Guardian / Silent Alarm
Team Org & Relay Control
Shamir Vault Recovery
SHA-3

Signal set the bar for private messaging. APPEIRON raises it — with entropy you can see, voice you can verify, and protection you can extend to the people who matter most.

Credibility

Verified by mathematics. Not by promises.

39
Tests passing
4
Research papers
5
Engine modules
127
Qubits tested
“We built APPEIRON because we realized that every encrypted messenger trusts its random numbers blindly. We wanted to build one that doesn't.”
— APPEIRON Research Team
Built with: RustSHA-3ChaCha20React Native  |  Tested on: IBM QuantumNIST SP 800-90B  |  Cascade Investment LLC
Security

What we protect. What we don't. Honestly.

What We Guarantee (verified by 39 tests)

Encryption Integrity

Changed byte in ciphertext → decryption fails. Wrong key → error, not random data. Wire: 12B nonce || ciphertext || 16B Poly1305 tag.

Entropy Detection

RANDU: z = −301. LFSR: z = −328. glibc: z = +4.6. Shannon reports 7.999 for all — blind. OS urandom: correctly healthy, zero false alarms.

Adaptive Monitoring

0 false alarms in 250 windows. CSPRNG → RANDU transition: detected in first 8 KB. Anti-poisoning baseline drift: 0.0000 after 20 attack windows.

Backup & Recovery

Encrypted vault backups are ciphertext-only on the relay. Shamir shard restore never exposes the vault key to the server. Wrong shard combination fails — no silent corruption.

What We Cannot Protect Against

Screenshots

We cannot prevent the recipient from capturing their screen. Disappearing messages are best-effort.

Compromised Device

If your phone is rooted or has system-level malware, no app can protect you.

State-Level Targeting

If a nation-state has physical access to your device, we cannot guarantee security.

Subtle Entropy Mixing

PL detects strong algebraic structure. It does not detect gradual mixing of good and bad RNG below 100% substitution.

Every product that claims to be “unbreakable” is lying. Security is a spectrum, not a switch. We tell you exactly where our defenses are strong and where they end — because informed users make better decisions than users who believe in magic.

FAQ

Frequently Asked Questions

How is APPEIRON different from Signal?
Signal pioneered E2E encrypted messaging. APPEIRON builds on that foundation and adds what no other messenger offers: live entropy verification, post-quantum hybrid encryption in every chat, VoiceGuard caller verification, Proof-of-Read certificates, Guardian protection, and Shamir vault recovery.
What is entropy monitoring?
Every encryption key is generated from random numbers. If those numbers aren't truly random, your keys are weak. Entropy monitoring continuously tests quality and alerts you if something changes. Think of it as a health monitor for your encryption.
What does the Health Score mean?
95-100%: Excellent — high-quality randomness. 70-94%: Good with minor fluctuations. Below 70%: Something may be degrading. APPEIRON attempts automatic remediation and notifies you.
Can APPEIRON read my messages?
No. Messages are encrypted on your device and decrypted only on the recipient's device. Our servers relay encrypted blobs — we never hold the keys. This is a mathematical guarantee, not a policy promise.
What is Quantum Vault?
An encrypted storage space on your device for sensitive files. Everything is encrypted with the same engine as messages. Physical Burn overwrites deleted data with cryptographic entropy, making forensic recovery impossible.
What is Mesh mode?
Peer-to-peer communication via Bluetooth and local WiFi when the internet is unavailable. In emergencies — natural disasters, infrastructure failures, censorship — Mesh mode lets you reach nearby contacts.
Is APPEIRON post-quantum secure?
Yes — today, not “planned”. Every chat uses a hybrid key exchange: ML-KEM-768 (NIST post-quantum standard) combined with X25519. An attacker would need to break both. Entropy is additionally validated for ML-KEM, ML-DSA and SLH-DSA, and the AR lattice is Shor-resistant by construction — it has no period for Shor's algorithm to find.
Do I need a phone number or email?
No. APPEIRON identities are cryptographic keys generated on your device. No phone number, no email, no address book upload. You connect with contacts by exchanging QR codes or invite links.
What can your servers see?
Encrypted blobs and the minimum routing data needed for delivery. With Sealed Sender, even the sender identity inside the envelope is encrypted. No message content, no media, no keys ever touch our servers in plaintext.
What is VoiceGuard?
On-device voice analysis during calls. It compares the caller’s voice to a previously enrolled voiceprint (is this really the person I know?) and shows a live stress index computed from prosody — pitch, jitter, energy. It is a stress indicator, not a lie detector, and all analysis runs locally on your phone. Nothing is uploaded.
Can you recover my data if I lose my phone?
No — and that’s by design. Keys exist only on your device. If you lose the device and have no encrypted backup, the data is gone. Pro+ offers an encrypted vault backup you control; we can never read it.
Is APPEIRON open source?
We plan to open-source the client after initial security audit. Mathematical foundations are published in peer-ready research papers.
Who is behind APPEIRON?
APPEIRON is developed by Cascade Investment LLC, an independent company focused on applied cryptography, secure communications, and privacy-first software.
What is Guardian?
A Guardian-tier feature for mutual consent protection. You invite someone you trust; they accept on their device. If you trigger a silent alarm — manually or automatically during a high-stress call — your Guardian contact receives an encrypted location request. No surveillance. No tracking by default. Only when protection is needed.
What does the Team tier include?
Everything in Pro+, plus an in-app admin panel to create organizations, generate APEIRO-ORG seat-pack codes, set a shared relay URL for all members, and optionally lock the relay so nobody can point at an unknown server.
How does Shamir vault recovery work?
Your vault key is split into shards using Shamir secret sharing. You assign shards to trusted contacts. If your device is lost, you combine enough shards with an encrypted backup ID to restore — without APPEIRON or the relay ever seeing your plaintext key.
What does Base include?
Base is the entry plan — a one-time purchase ($3.99), not a free forever tier. It includes E2E chat with post-quantum hybrid encryption, E2E voice & video calls, groups, disappearing messages, media editor, Proof-of-Read (Seal), Entropy Health Monitor, and anonymous identity in 13 languages. No ads, no data selling. Quantum Vault and Mesh require Pro.
Research

Published Research

APPEIRON's cryptography engine rests on original research in number theory, quantum chaos, and applied security — published in 2025 and engineered into production code.

Arithmetic Rigidity: From Primes to Quasicrystals to Quantum Chaos

The founding paper. Connects Baker's theorem to five domains of information science. 6 theorems, 23 references, 1121 lines.

Published 2025

T-Symmetry Preservation in Prime-Potential Quantum Billiards

Stadium billiard experiments: prime potentials protect time-reversal symmetry (GOE statistics) under perturbations.

Published 2025

Phase Locking Spectral Diagnostics for Random Number Generators

The bridge paper: transfers PL test from quantum physics to cryptographic engineering. Theorem + proof + validation.

Published 2025

Anomalous Rank-1 Response in Prime-Indexed Lattice Systems

Spectral perturbation analysis. Super-Poisson variance 1.48 at 13.9σ significance.

Published 2025

Real-Time Entropy Quality Monitoring for Quantum Processors

PL test applied to IBM Quantum 127-qubit hardware. Detects per-qubit bias invisible to Shannon entropy.

Published 2025
About

Beyond encryption. Beyond trust.

APPEIRON was born from a simple observation: every encrypted messaging app in the world trusts its random number generator blindly. If that generator fails — hardware degradation, supply chain compromise, deliberate backdoor — the encryption is silently compromised. Nobody knows. Sometimes for years.

We decided to build a messenger that doesn't just encrypt messages, but continuously verifies that the encryption is actually working — at the mathematical level, in real time, on your device.

The Research

The core technology is based on the Arithmetic Rigidity framework — connecting prime number theory, quasicrystal mathematics, and quantum chaos to practical information security. The Phase Locking test originated in quantum physics and was transferred to cryptographic engineering. Validated on IBM Quantum hardware and verified with 39 automated tests.

The Company

APPEIRON is developed by Cascade Investment LLC — building privacy technology that earns trust through mathematics, not marketing promises.

Contact:

Don't trust your encryption.
Verify it.

Base is available now ($3.99 one-time). Pro, Pro+, Team & Guardian include a 7-day free trial. Questions? Use the contact form.
Download

Get APPEIRON on your phone

Download on the App Store for iPhone and iPad. Choose Base ($3.99 one-time) or a subscription with a 7-day free trial inside the app. Android is not on Google Play yet — request the beta via Contact.

Need help with Team seats, Guardian setup, or gift codes?