Encrypted vault
Works on your phone alonePasswords, notes and 2FA codes, locked with a key made from your passphrase (Argon2id and XChaCha20-Poly1305). Optional decoy passphrase, growing lockouts, erase after too many wrong tries, panic erase.
Apex Flow Shield
Security you can check for yourself.
Apex Flow Shield keeps your passwords, messages and calls private. It tells you plainly what it cannot do, and lets you run the encryption tests on your own phone instead of taking our word for it.
In development. Not yet in the App Store or Google Play.
What it does
Device check
Works on your phone aloneScreen lock, root or jailbreak warning signs, and how old the system software is. Unknown checks are shown as unknown, never as passed.
Scam link checker
Works on your phone aloneSpots look-alike brand names, the "@" trick, raw addresses and link shorteners. It never opens the link and never says a link is safe.
Leaked-password check
Works on your phone aloneChecks passwords against the public Have I Been Pwned list. Only the first 5 characters of a scrambled fingerprint leave your phone.
"Prove it" tests
Works on your phone aloneRuns the encryption against published test values and real round trips on your own device, so you do not have to take our word.
Private chat
Built; needs a server or account you provideEnd-to-end encrypted (MLS, with a hybrid scheme designed to resist future quantum computers). Safety numbers, key-change alarm, disappearing messages, burn a chat on both phones. Needs a relay server.
Voice calls
Built; needs a server or account you provideEnd-to-end encrypted. Call setup travels inside the encrypted chat so nobody can swap the call's certificate. Proven on desktop; not yet on phones.
Protected DNS
Built; needs a server or account you provideSends website lookups over HTTPS to a server that refuses known tracker and malware names, for every app. Needs a DNS server.
VPN file builder
Built; needs a server or account you provideMakes the keys and config file for the free WireGuard app, on your phone. Needs a VPN server.
Burner numbers
Built; needs a server or account you provideRent a number from your own Telnyx account and read its texts here. Shows the exact cost first and will not buy without a monthly cap.
Android app scan
Not built yetScanning installed apps for malware on Android.
Prove it on your own device
The app has a "Prove it" screen. It runs the encryption against published test values and real round trips, right on your phone or computer. A pass means the cryptography behaves exactly as the standards say, on that device.
What it cannot do
No app can make a hacked phone safe
We can detect warning signs and tell you. If your phone is already compromised, the safest step is to reset it from official software.
iPhone limits
Apple does not let any app scan other apps. On iPhone we check settings and protect your own data; we do not scan for viruses.
Root and jailbreak checks can be fooled
A clean result means no warning light, not a guarantee.
Burner numbers hide you from people, not from the phone company
Providers need an account and billing details and must answer valid legal orders for data they hold. Ordinary text messages are not end-to-end encrypted by the phone network.
Lose the passphrase, lose the vault
The key comes from your passphrase. We never see it, so we cannot recover it.
Prices, shown with the math
The price is not set yet. When it is, every charge will be split into what it costs us, what the store or card processor takes, and our margin, so you see where each cent goes. How pricing works.
Questions
Is Apex Flow Shield available yet?
No. It is in development and is not in the App Store or Google Play. This page describes what is built and what is not.
Is it unhackable?
No. Nothing is. We describe the protections we built, the ways they can fail, and what we have not done yet, on the Security page.
Has it had an independent security audit?
Not yet. An independent audit is required before launch. The chat encryption library we use states that it has not been formally audited either.
What does it cost?
The price is not set yet. Every price will be shown with what it costs us, what stores and card processors take, and our margin as separate lines.
Who can read my messages?
Only you and the person you are talking to. Our relay server only holds scrambled messages it cannot open, and it never records who sent them.