A Zero-Knowledge Messenger
Messaging with zero middlemen.
Powered by Nostr relays and the Signal Protocol.
SOVEREIGN BY DESIGN
Privacy by physics, not policy.
Corporate promises expire the moment a company is subpoenaed or sold. MNDO is engineered so nobody—not even us—has the keys to your conversations.
No central server.
Messages move across independent Nostr relays. If any relay goes dark, the network self-heals and delivers anyway. Nobody owns the wire.
No phone number.
Your identity is a cryptographic keypair created right on your device. Zero registration, no SMS codes, and zero database records to leak.
Encrypted everywhere.
Signal Double Ratchet in transit. AES-256 SQLCipher on disk. Every relay, snooper, and middleman only ever touches undecipherable noise.
ARCHITECTURE
Four layers. One direction of dependency.
UI talks to State. State talks to Services. Services talk to Data. Nothing reaches upward, and nothing in the UI ever holds a key.
01UI
lib/ui/- Screens·
- Widgets·
- Theme
02State
lib/providers/- AuthProvider·
- ChatProvider·
- DiscoverProvider
03Services
lib/services/- Nostr Relays·
- Signal Messaging·
- Crypto Engine·
- SignalStore
04Data
lib/database/- Drift (SQLCipher)·
- Secure Key Storage·
- Models
BY THE NUMBERS
Facts that don't need adjectives.
Possible human-readable usernames (888 × 1,000 × 16⁶)
Scale relative to all humans estimated to have ever lived
AES key length across Signal Double Ratchet & SQLCipher
Central servers, phone numbers, or registration databases
Source code is part of the product.
MNDO's architecture is designed to be inspected, challenged, improved, and forked. Trust comes from verifiability—not a closed promise.
Ready when you are