VTOKKPrivate 1:1 and group messaging, encrypted media, disappearing and password-locked chats, status and live location β with a transparent, bounded promise about what our servers can and cannot see.
These features are live in the app today. The bigger team and creator tools are on the roadmap below β we don't show them here until they ship.
Direct messages use Olm Double Ratchet envelopes. If no encryption session is available, the app fails the send rather than falling back to plaintext.
Squad sends use Megolm epochs β encrypted once on your device, then fanned out by the server, which never holds the message keys.
Lock specific chats behind a dedicated password. Locked chats stay hidden from the main list until unlocked.
Search across all messages or filter by sender inside a room. Everything is indexed locally on your device.
Set a timer per chat (24 hours to 90 days). Messages purge locally and from recipient devices after expiry.
Export conversation history to XLSX directly from your phone. Generates locally without sending data to third parties.
Link companion browsers by scanning a QR code. Identity certificates are signed by your primary phone.
Control last seen, read receipts, squad invite permissions, and avatar visibility per contact or globally.
Assign work inside a thread with an owner and a due date. Title, assignee and due date travel inside the encrypted message payload and are stripped from the wire, so the server never sees them.
Ask a question across a group. The question, the options and every individual vote ride inside the encrypted payload; each device tallies the result locally. There is no server-side poll store.
Broadcast channels, locked posts and an in-app currency with verified Apple and Google purchases.
Busy groups get noisy. Person-wise search indexes every message on your device, so you can isolate what one teammate said β messages, photos, links β without endless scrolling.
A privacy promise is only worth as much as its bounds. Here are ours, in plain terms.
Protected direct-message sends use Olm Double Ratchet envelopes and protected group sends use Megolm epochs. If a current encryption session is unavailable, the app fails the send instead of using a static-key fallback or plaintext. Production E2EE verification is still in progress β we show a verified indicator only once it is earned, never on the strength of transport encryption alone.
Anything on this list is genuinely not available yet, and we say why. Features are moved out of here the moment they ship β we would rather under-promise than list something as live before it is.
Group and 1:1 calling.
We don't sell or monetize your personal data, and we support self-service account deletion and data export.
A valid legal request returns only what VTOKK lawfully holds β account details, device keys, audit logs, and evidence a user chose to report. Unreported message text and private keys stay cryptographically unavailable, to us and to anyone we'd have to hand data to.
iOS, Android and desktop. Link a new device in seconds with an ephemeral QR code.