IP-blind
The relay can’t see you
Media rides a blind relay that carries packets, not identities — your address is never exposed to the other side or the server.
📞
Calls
Voice & video where the other side never sees your address.
A blind relay carries the media; the keys ride the sealed feed. The other person never learns your IP, and the relay keeps no call log. Honest limit: while a call is live, our relay sees both connections (THREAT-MODEL §3.5).
IP-blind
keys sealed
post-quantum
live
Nobody sees who’s calling whom
A call sets up inside your already-sealed thread, so the key exchange is invisible to the server. The media travels through a blind relay that forwards packets without learning who the endpoints are — the same split that keeps messaging metadata-blind, applied to real-time audio and video.
Sealed keys
Negotiated in the dark
Call keys are exchanged over the sealed feed with the hybrid post-quantum seal — no plaintext setup, no server in the middle.
No record
Nothing kept
No call log, no “who called whom,” no duration ledger. When the call ends, there’s nothing left to seize.
How it works
Call from a thread
Tap to call a contact you’re already in a sealed conversation with. No dial-out to a phone network, no number to expose.
Keys ride the seal
The session keys are negotiated inside the sealed channel — post-quantum, authenticated, never touching a server in the clear.
Media over a blind relay
Audio and video flow through a relay that sees packets but not identities, so neither the relay nor an observer can link the two ends.
Ends leaving nothing stored
The keys are ephemeral and we keep no call log — nothing stored to harvest later. (While a call is live, our relay sees both connections.)
Also on the media path: group calls, and live broadcast / AMA to your VOID followers over the same IP-blind rails.
📞
Talk, in private
The same sealed identity that powers your messages powers your calls — one handle, nothing exposed.
Start a call →