MNDO

DECENTRALIZED · OPEN SOURCE · E2E ENCRYPTED

Messaging with zeromiddlemen.

  • Zero identity metadata — no phone number, SIM, or email required
  • Signal Protocol Double Ratchet end-to-end encryption
  • Decentralized Nostr relay mesh — no servers to seize or shut down
Download APK (Beta) View Architecture

v0.4.0-beta · Android · AGPLv3

Zero-Knowledge Messaging
Encrypted Conversations
Decentralized Discovery
Cryptographic Identity
Hardware-Backed Security
E2EE ACTIVE

Zero-Knowledge Messaging

Signal Double Ratchet over Nostr relays

Nostr ProtocolSignal Protocol E2EESQLCipherFlutter100% Open Source

WHY DECENTRALIZED

Centralized messengers ask for trust. MNDO removes the need for it.

relay mesh

No central server.

Messages move across a mesh of Nostr relays. Any relay can drop; the conversation continues. There is no single company, database or endpoint that can be seized, subpoenaed or switched off.

local keypair

No phone number.

Your identity is a keypair generated on your device in milliseconds. No SIM, no email, no verification SMS. Nothing to leak because nothing was collected.

local-first

Encrypted before it leaves. Encrypted where it lands.

Signal Protocol's Double Ratchet encrypts every message in transit. SQLCipher encrypts the database at rest with AES-256. Relays only ever see ciphertext.

ARCHITECTURE

Four layers. One direction of dependency.

UI talks to State. State talks to Services. Services talk to Data. Nothing reaches upward, and nothing in the UI ever holds a key.

Full architecture

  1. 01UI

    • Screens
    • Widgets
    • Theme

  2. 02State

    • AuthProvider
    • ChatProvider
    • DiscoverProvider

  3. 03Services

    • NostrRelayService
    • SignalMessagingService
    • CryptoService
    • SignalStore

  4. 04Data

    • ChatRepository (Drift)
    • IdentityRepository (flutter_secure_storage)
    • Models

BY THE NUMBERS

Facts that don't need adjectives.

0-bit

AES key length for the at-rest SQLCipher database

0

Phone numbers, emails or accounts required

0

Architecture layers, strictly one-directional

0 ms-class

Local keypair generation. Identity exists before the first network call

All facts
</>

Source code is part of the product.

MNDO's architecture is designed to be inspected, challenged, improved, and forked. Trust comes from verifiability—not a closed promise.

Open the project

Ready when you are

Your conversations belong to you.

Get MNDO