Encrypted calls

A phone line only the two of you can pick up

End-to-end encrypted, and the app knows who is calling: your partner. No numbers, no accounts, no media server — voice and video between the two phones you paired.

Voice Video, mid-call upgrade iPhone ⇄ Android Free

Peer-to-peer first

The phones talk to each other. A relay only carries encrypted packets when a network forces it.

Bound to the pairing

Each call’s DTLS fingerprint is authenticated with a key derived from your pairing secret. If the check fails, the call is aborted.

Per-call keys

Fresh key material every call. Signaling is AES-256-GCM under the pairing key, like every message.

No content in the ring

The push that rings the other phone is a wake-up, not a payload. The server never receives audio or video.

Honest comparison

Signal-ს აქვს ინდუსტრიაში ყველაზე გრძელი აუდიტის ისტორია, ღია კოდი და forward secrecy შეტყობინებებისთვის; ჩვენ ეს ყველაფერი ჯერ არ გვაქვს, და არც ვაპირებთ ამის თავის მოჩვენებას. ის, რასაც PinkyBond ცვლის, არის ვის შეუძლია შენთან მიღწევა და რას იცის აპი თქვენ ორივეზე. ჩვენი სერვერი მაინც ინახავს ზარების ისტორიას 90 დღით, რათა გამოტოვებულმა ზარმაც მიაღწიოს გამორთულ ტელეფონსაც; რა ზუსტად წერია მასში, ნახეთ ბოლო კითხვაში ქვემოთ.

DimensionSignalWhatsAppFaceTimePinkyBond
Media encryptionSRTP (Signal Protocol keys)SRTPSRTP, keys per FaceTime sessionDTLS-SRTP, per-call keys
IdentityPhone numberPhone numberApple ID / phoneNone — your pairing (QR in person, or a code exchanged remotely)
Who can call youAnyone with your numberAnyone with your numberAnyone with your IDOnly your partner
MITM protectionSafety number (manual check)Security code (manual)Apple key directoryFingerprint bound to the pairing secret, checked automatically
Server in the audio pathRelay when neededRelay when neededRelay when neededTURN relay when needed; cannot decrypt
Audit historyExtensive, publicPartialApple internalPlatform crypto (CryptoKit / Tink); no independent audit yet
Open sourceYesNoNoNo
Forward secrecyYesYesYesCalls: fresh keys per call. Messages: no — one key per pairing
Knows the relationshipNoNoNoYes — same app as her forecast and your check-ins

Vendor rows summarize public documentation as of September 2026. Architecture details for messages are on /encryption.

Why a couples app needs its own phone line

The call is not a feature bolted onto a dashboard. It sits next to her forecast, your check-in and the rough-day log, inside the one encrypted space that already knows the two of you. That is what makes it a relationship tool rather than a messenger: on a day the forecast reads stormy, the app can suggest the call that fits — listen, don't fix.

See how the forecast is built on /forecast.

Download on the App StoreGet it on Google Play
Download on the App StoreGet it on Google Play