CarrierPony: PGP Chat & Files

CarrierPony is an encrypted messenger and file transfer app for people who'd rather the middle know nothing.

Send messages and send real files, both sealed the same way. Everything is encrypted on your device and signed by your key, so only the people you paired with can open it, and they can be sure it really came from you. There's no account, no email, and no phone number. Your identity is a key that's generated on your iPhone and never leaves it.

MESSAGES AND FILES, SEALED
Chat privately and move files up to 50 MB in the same conversation, protected with OpenPGP using modern Ed25519 and Curve25519 keys. A dedicated Files tab keeps every transfer in one place, so sending a document is as simple as sending a message.

GROUPS AND CHANNELS
Start an encrypted group and share text and files with everyone in it, sealed the same way as a one-to-one chat. Or run a broadcast channel where you and your co-admins post and everyone else reads, and share a link that lets anyone subscribe. Subscribers never see each other.

THE RELAY KNOWS NOTHING
So your messages and files arrive even when your phone is off, they pass through a relay. That relay only ever forwards sealed envelopes. No names, no message contents, no files it can open, no plaintext. With sealed sender it does not even learn who is in a conversation, a group, or a channel. It holds an encrypted blob just long enough to deliver it, then lets it go.

SKIP THE RELAY WHEN YOU WANT
Turn on direct delivery and messages can travel straight between devices over your local network, or peer to peer across the internet, skipping the relay when a path exists. It stays off by default, and the relay stays the reliable fallback.

SEPARATE IDENTITIES
Keep more than one identity on the same device, say one for work and one for personal, each with its own key, contacts, and threads.

PAIR, THEN VERIFY
Connect by swapping an invite in person or over any channel you trust. Compare a safety number to be certain no one slipped into the middle. Give any contact a private name only you see.

YOURS TO KEEP
Keys are generated on your device and never leave it.
Lock the app behind Face ID.
Export an encrypted backup only you can open.
Already have an OpenPGP key from GnuPG or another tool? Import it and keep your identity.

OPEN AT THE CORE
The cryptography is built on NorseHorsePGPCore, published as open source under Apache-2.0. The relay is open source too, so you can run your own and point the app at it. The important part isn't a secret.

FREE
No ads. No trackers. Nothing about you is collected or sold.

CarrierPony is made by NorseHorse, an independent developer.