No phone number, no e-mail
You sign up with a username. The server never stores the username itself, only a deliberately slow hash of it. Usernames cannot be searched or listed; only someone who knows your exact username can find you.
Just between the two of you.
us2us is a one-to-one messenger without phone numbers, e-mail or cloud. Your conversations live only on the two phones. Our server carries sealed envelopes only until they are delivered, cannot look inside, and forgets them afterwards.
- App StoreComing soon
- Google PlayComing soon
Our promises
Your secret code protects everything
When you create your account you choose your own secret code. Everything on your phone (keys, messages, photos, contacts, settings) is encrypted with it. The code never leaves your phone and is independent of your username, so you can change your username at any time without touching your data.
End-to-end encryption
Messages are encrypted with libsignal, the official Signal protocol library (PQXDH and Double Ratchet, post-quantum protected). The keys exist only on the two phones.
Who talks to whom stays private
With sealed sender, the server knows where a message goes but not who sent it. Your contact list and your profile are never sent to the server.
No cloud
Messages and files are deleted from the server as soon as they are delivered; those waiting for you to open the app stay, encrypted, for at most 14 days. Only you create your backup file and keep it wherever you like.
No ads, no tracking, no analytics
No ads, trackers, analytics or cookies in the app or on this site. us2us is open source (AGPL-3.0).
No notifications. On purpose.
us2us doesn’t send you notifications. We didn’t forget them; we left them out to protect your privacy.
Phone notifications travel through Apple’s and Google’s servers. Even when the content is hidden, they can see which app sent your phone a message, and when. We didn’t want to leave even that trace.
- Your messages arrive when you open the app. While it’s open, everything flows instantly.
- Nothing gets lost. Messages wait for you, encrypted, for up to 14 days until you open the app.
- Nobody is watching. Not Apple, not Google, not any other company can learn who you talk to or when.
- Nothing runs in the background. Your battery will thank you.
Waiting for something important? Just tell them “check us2us”.
What you can do
Ghost mode
If nobody writes for a period you choose, the whole conversation (messages, photos, drafts) is wiped from both phones. Every new message restarts the timer.
Disappearing messages
Messages delete themselves a set time after they were read.
View once
Photos and videos that can be opened exactly once.
Photos, videos, voice and files
Files are encrypted on the phone and removed from the server once the recipient has downloaded them. Location metadata (EXIF) is stripped before sending.
Location and live location
Share where you are, or your live location for a while, end-to-end encrypted.
Active now
Contacts you have accepted see a green dot next to your name while your app is open. It is mutual: hide your status and you will not see theirs either. No long-term “last seen” is kept.
Stickers and reactions
Stickers, emoji reactions, replies and delete for everyone.
Message requests
A stranger who writes to you for the first time must do a small computation (proof-of-work) on their phone. Whether you accept is up to you.
App lock
Lock with your secret code or biometrics, screenshot protection and safety numbers.
To be honest
- The other person can photograph the screen; no app can fully prevent that.
- If you forget your secret code, your data cannot be recovered. That is by design: there is no back door that could reset the code.
- You get no notifications while the app is closed; open it to check for new messages. A message waits at most 14 days, then it is deleted undelivered.
- Our server can see your IP address while you are connected, and which account each message goes to, when, and how large it is. The privacy policy has the details.