Encrypted calls

A phone line only the two of you can pick up

Signal-grade privacy, and the app knows who is calling: your partner. No numbers, no accounts, no server in the audio path — voice and video between the two phones you paired in the same room.

Voice Video, mid-call upgradeiPhone ⇄ AndroidFree

Peer-to-peer first

The phones talk to each other. A relay only carries encrypted packets when a network forces it.

Bound to the pairing

Each call’s DTLS fingerprint is authenticated with a key derived from the secret you exchanged by QR code. A stranger cannot sit in the middle.

Per-call keys

Fresh key material every call. Signaling is AES-256-GCM under the pairing key, like every message.

No content in the ring

The push that rings the other phone is a wake-up, not a payload. The server never receives audio or video.

Honest comparison

Signal has the longest audit trail in the industry and we are not going to pretend otherwise. What PinkyBond changes is who can reach you and what the app knows about the two of you.

DimensionSignalWhatsAppFaceTimePinkyBond
Media encryptionSRTP (Signal Protocol keys)SRTPSRTP, keys per FaceTime sessionDTLS-SRTP, per-call keys
IdentityPhone numberPhone numberApple ID / phoneNone — the pairing you made in person
Who can call youAnyone with your numberAnyone with your numberAnyone with your IDOnly your partner
MITM protectionSafety number (manual check)Security code (manual)Apple key directoryFingerprint bound to the pairing secret, checked automatically
Server in the audio pathRelay when neededRelay when neededRelay when neededTURN relay when needed; cannot decrypt
Audit historyExtensive, publicPartialApple internalPlatform crypto (CryptoKit / Tink); no third-party audit yet
Forward secrecyYesYesYesPer call: yes. Messages: planned
Knows the relationshipNoNoNoYes — same app as her forecast and your check-ins

Vendor rows summarize public documentation as of August 2026. Architecture details for messages are on /encryption.

Why a couples app needs its own phone line

The call is not a feature bolted onto a dashboard. It sits next to her forecast, your check-in and the rough-day log, inside the one encrypted space that already knows the two of you. That is what makes it a relationship tool rather than a messenger: on a day the forecast reads stormy, the app can suggest the call that fits — listen, don’t fix.

See how the forecast is built on /forecast.

Get it on Google Play
Get it on Google Play