Metadata
“Secure” apps know who you talk to, when, for how long and from where. Encryption does not hide metadata.
Privacy ecosystem · GrapheneOS
Your information is not for sale.
Four applications, one principle: your conversations, your notes and your AI never leave the device. No Google, no third-party clouds and no telemetry.
- 04 integrated apps
- 00 trackers
- 00 Google dependencies
- 100% on-device AI
The problem
If the service is free, you are the product.
Every conversation, note and query leaves a trace beyond your control. Nobody needs to read your messages to know everything about you.
Third-party clouds
Your notes, photos and documents live on servers you do not control: they can be lost, sold or leaked.
AI with eyes
Your chats and documents are uploaded to third-party clouds to train models. What you ask also gives you away.
Privacy is not requested. It is designed.
The three pillars
Privacy is not promised: it is designed.
Real E2E encryption
Your messages are encrypted on your phone and only decrypted on the recipient’s. Not even the server holds the key.
Nobody else reads your messages
Your own server
Your infrastructure, your database and your backups. No third-party clouds or external dependencies.
You control the data
Zero Google
No Google Play Services, no Firebase. Our own push notifications and zero telemetry: nothing you do leaves the phone.
No trace, no metadata
Three rules we do not negotiate.
The ecosystem
Four apps. One guarantee.
Communication, memory, intelligence and protection. Each app solves one part, and none of them gives your data away.
BlackM Chat
Private messaging
1:1 and group chats, media, and voice and video calls with end-to-end encryption.
See details
BlackM Notes
Encrypted vault
Notes and spreadsheets encrypted on your device, with a built-in calculator and no local cache.
See details
BlackM AI
Local intelligence
Language models that run on the phone. No connection, no servers, and no prompts sent to anyone.
See details
BlackMSecurity
Anti-coercion protection
Dual PIN, a decoy profile and plausible deniability to protect your crypto apps.
See detailsBlackM Chat
Talk without being overheard
Instant messaging with the Signal protocol, your own server and signed updates. Built for GrapheneOS, from Android 12.
- 1:1 and group chats with roles and invitations
- Photos, videos, documents and voice notes
- Built-in voice and video calls
- Messages that self-destruct after being viewed
The server only stores encrypted data, and messages are purged after 7 days.
BlackM Notes
Your memory, under lock and key
Notes and spreadsheets in a vault that only opens on your device. The server stores encrypted blobs it cannot read.
- E2E vault with Argon2id and XChaCha20-Poly1305
- Notes with a full built-in calculator
- Spreadsheets with formulas and formatting
- Zero local cache: content lives in RAM
If you lose the device and have no recovery phrase, the data cannot be restored. That is the price of nobody else being able to read it.
BlackM AI
Intelligence that never asks the cloud
GGUF models running on the phone itself through llama.cpp. It works on a plane, on the underground or with the network revoked.
- Seven models to download and choose from
- 100% local inference, no connection
- No calls to external servers
- Local history, no synchronisation
What you ask trains nothing and never leaves the device.
BlackMSecurity
When coercion is the threat
A Device Owner utility that hides your crypto apps behind a PIN and opens a decoy profile with the panic PIN.
- Good PIN and panic PIN, different from each other
- Decoy profile with ordinary apps
- Decoy icons and plausible deniability
- Offline recovery with 12 words
No INTERNET permission: zero telemetry, zero network. Requires setting up Device Owner over ADB once.
Comparison
Only BlackM covers it all
Against the alternatives you already use. No tricks: Signal wins on encryption, and we say so.
| Capability | Telegram | Signal | Cloud/Notes | ChatGPT | BlackM | |
|---|---|---|---|---|---|---|
| Real E2E encryption | No | Partial | Yes | No | No | Yes |
| Server under your control | No | No | No | No | No | Yes |
| No telemetry | No | No | No | No | No | Yes |
| 100% local AI | No | No | No | No | No | Yes |
| Anti-coercion | No | No | No | No | No | Yes |
Signal wins on encryption; Telegram only applies it in secret chats. The comparison is deliberately honest.
Everything else exposes you.
How it starts
Four steps. No cloud.
From a brand-new Pixel to a private ecosystem, with no Google account.
Prepare the device
You need a Pixel running GrapheneOS. No Google accounts, no third-party services.
Request access
Write to us and we will set you up with a valid ecosystem licence.
Install the apps
You receive the four applications and the device preparation assistant.
Forget about Google Play
Chat, Notes and AI update through signed OTA from our own server. Security ships as a signed APK. Google Play is not involved.
Licences have a defined term and can be revoked. There is no automatic subscription and no hidden billing.
Frequently asked
What people usually ask.
No fine print. If something is missing, write to us.
Do I need GrapheneOS?
The ecosystem is designed and tested for GrapheneOS. BlackM Chat and Notes require Android 12 or later; AI and Security support earlier versions, but the whole set is tested on GrapheneOS. Protections such as signature verification or Device Owner control depend on the system.
Can I use my own server?
Yes. BlackM Chat and BlackM Notes can be self-hosted on a Linux server with Docker and a public IP. Chat also needs port 3478 for calls (TURN).
Can the server read my messages or notes?
No. Encryption and decryption happen on the device. The server stores encrypted data it cannot interpret, even with physical access to the database.
What happens if I lose my phone?
The PIN protects access and the local database is encrypted. In Notes the vault is bound to the device: without the recovery phrase it cannot be restored. In Chat, the panic PIN wipes local data and notifies the server.
Do the apps track me or request odd permissions?
There are no analytics, ads or third-party SDKs. BlackMSecurity does not even request the INTERNET permission: it cannot connect anywhere.
How are the apps updated?
Chat, Notes and AI update through signed OTA from our own server, with SHA-256 verification before installing and resumable downloads. Security is installed and updated as a signed APK. Google Play is not involved.
Does the AI need internet?
Only to download the model the first time. After that, inference is 100% local: you can turn on airplane mode and keep using it.
Is there an iPhone or Windows version?
No. This is an Android/GrapheneOS ecosystem by design: the guarantees depend on control of the operating system and the device.
Request access
Your information is too valuable to give away.
Write to us and we will explain how to set up your BlackM ecosystem: device, licence and installation.
Email BlackM No forms. No cookies. Just email.