Raven is an end-to-end encrypted messenger that keeps working when the network doesn't. Your chats, voice rooms, and posts travel device-to-device over a peer-to-peer Bluetooth mesh — fully sealed with X25519 and AES-256, with or without internet.
Most encrypted messengers fall back to nothing when the internet drops. Raven keeps the same end-to-end guarantees whether you're on Wi-Fi, on cellular, or completely off-grid in a Bluetooth mesh.
Every message, post, and reaction is sealed with X25519 key exchange and AES-256-GCM on your device. Whatever path it takes — server, peer, or 5-hop bridge — only ciphertext travels.
When the network's gone, Raven hands the same encrypted envelope to a peer-to-peer BLE mesh. Relay devices forward bytes they can't read — zero-knowledge by design.
No phone numbers. No address books uploaded. No contact graph on the server. Identities are anonymised hashes; the local database is sealed with SQLCipher (AES-256).
DMs, groups, voice rooms, posts, and geo-pinned moments. All wrapped in the same end-to-end encrypted envelope — and all available when you have no signal.
Bluetooth Low Energy carries encrypted chats, posts, and receipts across up to 5+ hops. Neighbours become the network — no internet, no cell, no problem.
Hide chats, photos, and files behind Face ID. Vaulted content is double-encrypted with a key that never touches the network — even App Lock alone won't unseal it.
Live voice rooms with low-latency SFU routing. Concert mode auto-discovers attendees in a venue and spins up a private channel.
An algorithm-free social feed that syncs over the mesh. Posts, comments, mentions all replicate offline and reconcile when peers reconnect.
Pin photos and short clips to a real-world location. Discover what's around you on a private, expiring map — never aggregated, never sold.
Smart-reply suggestions and Apple Translation run entirely on the device using Foundation Models. No prompts, transcripts, or contact data ever leave the phone.
The same Swift codebase ships natively on both — no Electron, no shim, full background BLE on each platform.
Swift + SwiftUI, Liquid Glass UI, CoreBluetooth peripheral and central running concurrently for full mesh participation in foreground and background.
NavigationSplitView shell with a capsule sidebar, ⌘-shortcuts everywhere, and a LaunchAgent companion that keeps mesh delivery alive while the window is closed.
Every message — whether DM, post, or live audio control — is wrapped in the same signed envelope. The router picks the cheapest path that's actually working.
Real-time delivery over WebSocket against a Python FastAPI service on Google Cloud Run. Push fan-out via APNs for offline recipients.
Peer-to-peer BLE GATT writes between devices that see each other. Multipeer Connectivity adds a Wi-Fi/AWDL fast lane in the same room.
Store-and-forward across multi-hop relays. A neighbour holds your encrypted envelope until it meets a node that can finish delivery — back online or in range of the recipient.
Crypto primitives, mesh routing, and the message envelope format are documented in full. Researchers, security teams, and serious users can request review access to the security-critical sources — we'd rather you check than take our word for it.