CarrierPony: PGP Chat & Files

CarrierPony is a private messenger and secure file transfer app with real, end-to-end PGP encryption. No phone number. No email. No account. Just you, the people you trust, and encryption that actually works.

WHY CARRIERPONY?

Most "secure messaging" apps still ask for your phone number and store your contact list. CarrierPony asks for nothing. Your identity is an OpenPGP key pair created on your device, and your private key never leaves it.

REAL PGP ENCRYPTION
* Every message and file is end-to-end encrypted with OpenPGP
* Messages are encrypted on your device and only decrypted on your contact's device
* The relay server forwards sealed envelopes only: no names, no contents, no plaintext
* Built on PGPonyCore, our open-source cryptography engine anyone can inspect

NO ACCOUNTS, NO TRACKING
* No phone number, email, or sign-up required
* No contact list upload, no ads, no analytics, no trackers
* A random per-install ID is all the relay ever sees

SECURE FILE TRANSFER
* Send photos, documents, and files of any type, encrypted end to end
* Files are never uploaded in readable form, and never scanned

PAIR WITH A QR CODE
* In person: one QR code scan pairs both phones
* Remote: send an invite over any channel you trust
* Verify contacts with a safety number

STAY IN CONTROL
* Disappearing messages with a per-conversation timer
* App lock with fingerprint or face unlock
* Encrypted identity backups protected by a passphrase only you know
* Private, per-contact nicknames only you can see
* Reset and erase everything, any time

RELAYS AND NETWORK
* By default, sealed messages go through the CarrierPony relay at api.carrierpony.com
* Run your own CarrierPony-Relay and point the app at it in Settings > Relay
* Optional Nostr transport, off by default: when turned on, each sealed message is also posted to third-party Nostr relays (relay.damus.io and nos.lol by default). Those relays see opaque content and your IP address

CarrierPony is part of the Pony family of privacy apps, alongside PGPony (OpenPGP for your phone), AgePony, QuorumPony, and RelayPony.

Questions? support@carrierpony.com

Recent changes:
Disappearing messages are back. Set a timer per conversation, from 1 hour to 4 weeks, and new messages delete themselves when it runs out. 3.0.0 dropped it by mistake. Expired messages now take their attachments with them.
Long-press a message to copy its text. Send files from the new button at the bottom of the Files tab.
With App Lock on, rotating the phone, sharing a file or opening a link no longer locks the app. Files over 50 MB are flagged when you pick them.