Every feature in Phantom Chat was engineered with a single question: what would a privacy absolutist demand?
Among the few messengers that combine the Signal Protocol with NIST's post-quantum algorithm (ML-KEM-768, the FIPS 203 standard). Every conversation is encrypted with both classical and post-quantum keys at once — if either holds in 20 years, your messages stay safe. WhatsApp doesn't have post-quantum encryption; Signal added it in 2024 and Apple added PQ3 to iMessage the same year.
Every message is encrypted on your device before transmission using the Signal Protocol's Double Ratchet — the same forward-secrecy standard used by Signal, WhatsApp, and Google Messages. Only the recipient's device holds the keys to decrypt. We can't see your messages. Our servers can't see your messages. No one in transit can see your messages.
Your long-term identity key is generated inside the iPhone's Secure Enclave — a tamper-resistant chip isolated from iOS itself. The private key cannot be extracted, even by malware or jailbreaks.
If you still have your phone and it's at risk of being seized or compromised, you can instantly delete your account and all data with three quick-access methods built in: shake gesture, Lock Screen widget, or a separate reset PIN. All resets use a secure multi-pass overwrite so deleted data cannot be recovered. Note: these triggers require physical access to your device — there is no remote wipe from a different phone, by design.
No phone number, no email, no real name. Sign up with just a username (plus acceptance of the Terms and Privacy Policy). There's no public directory and no username search — the only way to connect is an invite code or QR. The account isn't tied to your SIM, your carrier, or any leaked identity database.
Choose from 76+ custom app icons, set themes, and make Phantom Chat feel like yours. Contacts are added through expiring invitation codes (single-use up to 500 joins; duration from 1 day to never — your choice).
Open standards, hardware trust, and quantum-resistant cryptography — layered so that breaking one layer still leaves your messages protected by everything else.
Signal Protocol Double Ratchet, NIST FIPS 203 ML-KEM-768, and FIPS 202 SHA-3 — all peer-reviewed, industry-standard cryptographic building blocks. Our own implementation of them hasn't yet had an independent third-party audit; that's a funded item on our roadmap.
Encryption keys are generated on your device and never leave it. Your identity key lives inside Apple's Secure Enclave hardware — physically isolated from iOS and inaccessible to any software.
Compare security fingerprints with each contact in person or over a separate channel. Phantom Chat surfaces key changes automatically so you can re-verify whenever needed.
Our servers route and store encrypted message blobs we cannot read. They hold only what's needed to run the service — your username, an opaque push token, and subscription status. We can't read your messages. Encrypted blobs are removed when a disappearing-message timer expires or when you delete your account. Push notifications carry zero message content.
Phantom Chat is funded entirely by subscribers and Founders. No VC. No data harvesting. No ads. The numbers below are what it costs to keep the servers running and the promises kept.
All prices in US dollars. Apple converts to your local currency at the App Store checkout — Australian customers see GST-inclusive AUD totals at the point of purchase. The amount you're billed in AUD may vary with prevailing exchange rates.
Pay once. Use Phantom Chat forever. We're capping Founders at 500 seats because that's how much runway it gives us to refuse VC money. After that, Founder closes for good.
Subscription revenue funds the running and improvement of Phantom Chat — directly, not by way of a marketing or advertising department. No executives cashing out. No shareholders to satisfy. Just the work that keeps the service running and your messages private.
Revenue funds our managed server infrastructure: encrypted-at-rest storage, hardened access controls, and the end-to-end encryption that means even with full server access, we cannot decrypt the messages we route.
We don't invent crypto and we don't ask you to trust us with secret algorithms. Your subscription pays the engineering work to integrate peer-reviewed standards correctly — the Signal Protocol, NIST FIPS 203 ML-KEM-768, AES-256-GCM, and Apple's Secure Enclave.
As revenue grows, your subscription will fund the next priorities: independent third-party security audits, formal cryptographic review, and an Android client. These are roadmap items today, not delivered features — we'll publish progress as each one ships.
You evaluate messengers on what they actually do. Phantom Chat uses ML-KEM-768 for post-quantum key exchange, FIPS 202 SHA-3, and per-device keys that never leave the device — auditable, not aspirational.
Journalists, organisers, researchers, lawyers. When the person on the other end of a chat could be compromised by their phone number being known, "no phone number required" stops being a feature and starts being the point.
Dating apps, side projects, marketplace listings, anyone you're not ready to give your real number to yet. Talk like a normal person without handing over the keys to your real identity.
Family, friends, group chats. You don't need a threat model to deserve a messenger that isn't quietly profiling you in the background.
I'm not a tech founder. My background is in mining — I came to this from the other side, as a user who got tired of every messaging app I trusted turning out to be a quiet data broker.
Phantom Chat started as a proof of concept. I wanted to see whether one person, working seriously, could build a messenger that was actually private — not "private when convenient" or "private until the next policy update," but cryptographically private in a way the developer themselves couldn't undo. The answer turned out to be yes.
Veilus Digital, the company behind Phantom Chat, is registered in Western Australia. It's not VC-backed, it's not for sale, and there are no investors waiting for the day we monetise your behaviour. Subscription revenue funds the service directly — server costs, engineering, future audits — and nothing else. Selling your data isn't a temptation we're resisting; it's a business model we structurally don't have access to.
The product is built around a single commitment that won't change: your messages, your contacts, and your activity are not the product. We can't read what you send. We don't profile what we can see. We don't sell, share, or rent any of it.
The goal is simple: to build one of the most private messengers you can install, by someone who isn't being paid to look the other way. Privacy isn't a feature here. It's the entire reason this exists, and it's the one thing that will never change.
If we ever stop being the kind of company that can say all of that honestly, this page will say something different — and the warrant canary in our Privacy Policy will be the first place you find out.
Download Phantom Chat and send your first encrypted, self-destructing message in under a minute. No setup complexity. Just security, by default.
Last updated: 26 May 2026
Veilus Digital is a business operated by Curtis John Tunaley (ABN 90 372 665 693), registered in Western Australia, Australia. Contact: support@veilusdigital.co.
Veilus Digital uses industry-standard end-to-end encryption (the Signal Protocol, hybridised with NIST FIPS 203 post-quantum encryption / ML-KEM-768) to provide private messaging services to users worldwide. You agree to our Terms of Service ("Terms") by installing or using our apps, services, or website (together, "Services").
Account Registration. To create a Phantom Chat account all you need is a username. No phone number, email address, or personal information is required to sign up.
Privacy of user data. Veilus Digital does not sell, rent or monetize your personal data or content in any way — ever.
Please read our Privacy Policy to understand how we safeguard the information you provide when using our Services.
Software. In order to enable new features and enhanced functionality, you consent to downloading and installing updates to our Services.
Fees and Taxes. You are responsible for data and mobile carrier fees and taxes associated with the devices on which you use our Services. Phantom Chat is offered on a 14-day free trial (no payment information required to start). After the trial period, continued access requires a paid subscription:
• Personal plan — US$14.99 per month or US$119.99 per year
- Founder plan — one-time lifetime payment of US$299 / US$399 / US$499 depending on the wave at time of purchase
- Anonymous tier (coming soon) — pricing will be disclosed in-app before purchase
Currency and local taxes. All prices are listed in United States Dollars (USD). Apple converts the displayed USD price into your local currency at the App Store checkout and adds applicable taxes — including 10% GST for Australian residents — at the point of purchase. The amount actually charged in your local currency may vary with prevailing exchange rates. All recurring subscriptions auto-renew until cancelled; you may cancel at any time from your device's subscription settings, and no refunds are issued for partial billing periods. Founder purchases are non-refundable except where required by applicable law (including the Australian Consumer Law).
Subscription Management. Subscriptions auto-renew unless cancelled at least 24 hours before the end of the current period. Your iTunes Account will be charged for renewal within 24 hours prior to the end of the current period at the cost of the chosen subscription package. You can manage and cancel your subscription by going to your iTunes Account Settings after purchase. Any unused portion of a free trial period will be forfeited when you purchase a subscription.
Age Requirement. You must be at least 13 years of age to use Phantom Chat. If you are between 13 and 18, you should review these Terms with a parent or legal guardian before using the Services. We do not knowingly collect personal information from anyone under 13. If we learn that we have done so, we will delete that information promptly. Some app stores may require a higher minimum age for unmoderated messaging services — please refer to the age rating displayed on your app store before downloading.
Our Terms and Policies. You must use our Services according to our Terms and posted policies. If we disable your account for a violation of our Terms, you will not create another account without our permission.
Legal and Acceptable Use. You agree to use our Services only for legal, authorized, and acceptable purposes. You will not use (or assist others in using) our Services in ways that: (a) violate or infringe the rights of Veilus Digital, our users, or others, including privacy, publicity, intellectual property, or other proprietary rights; (b) involve sending illegal or impermissible communications such as bulk messaging, auto-messaging, and auto-dialing.
Harm to Veilus Digital. You must not (or assist others to) access, use, modify, distribute, transfer, or exploit our Services in unauthorized manners, or in ways that harm Veilus Digital, our Services, or systems. For example you must not (a) gain or try to gain unauthorized access to our Services or systems; (b) disrupt the integrity or performance of our Services; (c) create accounts for our Services through unauthorized or automated means; (d) collect information about our users in any unauthorized manner; or (e) sell, rent, or charge for our Services.
Keeping Your Account Secure. Veilus Digital embraces privacy by design and does not have the ability to access your messages. You are responsible for keeping your device and your Phantom Chat account safe and secure.
No Access to Emergency Services. Our Services do not provide access to emergency service providers like the police, fire department, hospitals, or other public safety organizations. Make sure you can contact emergency service providers through a mobile, fixed-line telephone, or other service.
Your Rights. You own the information you submit through our Services. Your messages are end-to-end encrypted and cannot be accessed by Veilus Digital or any third party. You choose the username you register with and may update or delete your account at any time.
Veilus Digital's Rights. We own all copyrights, trademarks, domains, logos, trade dress, trade secrets, patents, and other intellectual property rights associated with our Services. You may not use our copyrights, trademarks, domains, logos, trade dress, patents, and other intellectual property rights unless you have our written permission. To report copyright, trademark, or other intellectual property infringement, please contact support@veilusdigital.co.
Veilus Digital's License to You. Veilus Digital grants you a limited, revocable, non-exclusive, and non-transferable license to use our Services in accordance with these Terms.
Disclaimers. YOU USE OUR SERVICES AT YOUR OWN RISK AND SUBJECT TO THE FOLLOWING DISCLAIMERS. WE PROVIDE OUR SERVICES ON AN "AS IS" BASIS WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, AND FREEDOM FROM COMPUTER VIRUS OR OTHER HARMFUL CODE. VEILUS DIGITAL DOES NOT WARRANT THAT ANY INFORMATION PROVIDED BY US IS ACCURATE, COMPLETE, OR USEFUL, THAT OUR SERVICES WILL BE OPERATIONAL, ERROR-FREE, SECURE, OR SAFE, OR THAT OUR SERVICES WILL FUNCTION WITHOUT DISRUPTIONS, DELAYS, OR IMPERFECTIONS. WE DO NOT CONTROL, AND ARE NOT RESPONSIBLE FOR, CONTROLLING HOW OR WHEN OUR USERS USE OUR SERVICES. WE ARE NOT RESPONSIBLE FOR THE ACTIONS OR INFORMATION (INCLUDING CONTENT) OF OUR USERS OR OTHER THIRD PARTIES. YOU RELEASE US, AFFILIATES, DIRECTORS, OFFICERS, EMPLOYEES, PARTNERS, AND AGENTS (TOGETHER, "VEILUS DIGITAL PARTIES") FROM ANY CLAIM, COMPLAINT, CAUSE OF ACTION, CONTROVERSY, OR DISPUTE (TOGETHER, "CLAIM") AND DAMAGES, KNOWN AND UNKNOWN, RELATING TO, ARISING OUT OF, OR IN ANY WAY CONNECTED WITH ANY SUCH CLAIM YOU HAVE AGAINST ANY THIRD PARTIES.
Limitation of liability. THE VEILUS DIGITAL PARTIES WILL NOT BE LIABLE TO YOU FOR ANY LOST PROFITS OR CONSEQUENTIAL, SPECIAL, PUNITIVE, INDIRECT, OR INCIDENTAL DAMAGES RELATING TO, ARISING OUT OF, OR IN ANY WAY IN CONNECTION WITH OUR TERMS, US, OR OUR SERVICES, EVEN IF THE VEILUS DIGITAL PARTIES HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. OUR AGGREGATE LIABILITY RELATING TO, ARISING OUT OF, OR IN ANY WAY IN CONNECTION WITH OUR TERMS, US, OR OUR SERVICES WILL NOT EXCEED ONE HUNDRED UNITED STATES DOLLARS (US$100). THE FOREGOING DISCLAIMER OF CERTAIN DAMAGES AND LIMITATION OF LIABILITY WILL APPLY TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW.
Australian Consumer Law. Nothing in these Terms is intended to exclude, restrict, or modify any guarantee, condition, warranty, right, or remedy that applies to you under the Australian Consumer Law (ACL) and which cannot be lawfully excluded. To the extent that any provision of these Terms is invalid or unenforceable under the ACL, that provision is severable and the remainder of these Terms continue to apply. Where the ACL applies, our liability for a failure to comply with a consumer guarantee is limited (where permitted) to: (a) re-supplying the Services; or (b) paying the cost of having the Services re-supplied.
Availability of Our Services. Our Services may be interrupted, including for maintenance, upgrades, or network or equipment failures. We may discontinue some or all of our Services, including certain features and the support for certain devices and platforms, at any time.
Resolving disputes. You agree to resolve any Claim you have with us relating to or arising out of our Terms, us, or our Services in accordance with applicable laws. The laws of Australia govern our Terms, as well as any disputes which might arise between Veilus Digital and you.
Ending these Terms. You may end these Terms with Veilus Digital at any time by deleting Phantom Chat from your device and discontinuing use of our Services. We may modify, suspend, or terminate your access to or use of our Services anytime for any reason, such as if you violate the letter or spirit of our Terms or create harm, risk, or possible legal exposure for Veilus Digital.
Veilus Digital may update the Terms from time to time. Our Terms cover the entire agreement between you and Veilus Digital regarding our Services and supersede any prior Terms.
Material Changes. When we make material changes to these Terms, we will notify you via an in-app banner at least 14 days before the change takes effect. Continued use of the Services after that date constitutes acceptance of the updated Terms. Non-material clarifications, typographical corrections, and updates to contact details may be made without advance notice.
If you have specific questions about these Terms, please contact us at support@veilusdigital.co.
Last updated: 26 May 2026
Veilus Digital is a business operated by Curtis John Tunaley (ABN 90 372 665 693), registered in Western Australia, Australia. Contact: support@veilusdigital.co.
Veilus Digital uses industry-standard end-to-end encryption — the Signal Protocol, hybridised with NIST FIPS 203 post-quantum encryption (ML-KEM-768) — to provide private messaging services to users worldwide ("Services"). Your messages are encrypted on your device before they are ever transmitted, so they can never be shared or viewed by anyone but yourself and the intended recipients — not even by Veilus Digital.
Account Information. To create a Phantom Chat account, all you need is a username of your choice. No phone number, email address, or other personal information is required. Your chosen username is the only account identifier we hold, and we cannot access or read any of your message content.
Messages. Veilus Digital cannot decrypt or otherwise access the content of your messages. Because Phantom Chat is built on true end-to-end encryption, your message content is encrypted on your device before it is ever transmitted. We have no technical ability to read, store, or hand over your messages to any third party — including law enforcement. Your readable message history lives only on your own devices. Our servers never hold anything but encrypted ciphertext that we have no ability to read.
User Support. If you contact Veilus Digital support at support@veilusdigital.co, any information you voluntarily share with us is used only to respond to your enquiry and is not retained beyond that purpose.
Managing your information. You can manage your account information in Phantom Chat's application Settings. You may permanently delete your account and all associated data at any time using the in-app account-reset feature, which deletes your server-side data, wipes the encryption keys from your device's Keychain — making any residual encrypted data cryptographically unrecoverable — and performs a multi-pass (DoD 5220.22-M) overwrite of the app's stored files.
When you use Phantom Chat, our servers hold only the following items, all of which are either chosen by you or unreadable to us:
We do not store: phone numbers, email addresses, real names, contact lists, location data, IP addresses — we do not store them; any transient connection logs are held by our infrastructure providers (Google, Apple) under their own retention policies, device fingerprints, advertising identifiers, or any tracking identifiers.
To provide Phantom Chat, we use the following subprocessors. None of them have access to your message content; they only handle encrypted blobs and account-level identifiers:
We do not use any analytics, advertising, or tracking subprocessors. If we ever add or change subprocessors that touch user data, we will update this Privacy Policy and notify users in accordance with the Material Changes clause below.
Because Phantom Chat is designed with end-to-end encryption at its core, Veilus Digital has no access to the content of your messages and therefore has no message content to share with anyone. In the very limited circumstances described below, we may be required to act on account-level information (such as your username and subscription status) only:
In all such cases, any information we could provide is limited strictly to account-level data. We cannot and will not provide message content — it is technically impossible for us to do so.
Last updated: 26 May 2026.
As of the date above, Veilus Digital has received:
We update this statement at least once every calendar quarter. If this section is ever removed, replaced with a date older than three months, or stops being updated, you should assume something has changed that we may not be legally able to disclose.
Even with end-to-end encryption, this commitment matters: account-level metadata (such as your username and subscription status) is the only thing we could in principle be compelled to disclose, and we will publish honest, current information about whether any such compulsion has occurred. We will not falsify, backdate, or pad this statement under any circumstance.
We will update this Privacy Policy as needed so that it is current, accurate, and as clear as possible.
Material Changes. When we make material changes to this Privacy Policy, we will notify you via an in-app banner at least 14 days before the change takes effect. Continued use of the Services after that date constitutes acceptance of the updated Privacy Policy. Non-material clarifications, typographical corrections, and updates to contact details may be made without advance notice.
If you have questions about our Privacy Policy please contact us at support@veilusdigital.co.
Effective as of 26 May 2026
