NEVULA

NEVULA is a private Android space for encrypted messaging and everyday private tools — behind a normal calculator when you need it to stay discreet. SECURITY BY DESIGN NEVULA was developed to protect private communication and personal data on the smartphone to high security and privacy standards. During its design, known attack scenarios and real-world security incidents affecting modern communication systems were analyzed, in order to derive additional protective mechanisms for NEVULA. What that means in practice — scenarios the design responds to: 1) Someone forces the phone open or demands the unlock code. Response: calculator gate with a separate on-device destruction PIN and Emergency Kill. Wipe the private vault on this phone instantly — even offline, with no server required. Hidden Mode shows a normal calculator icon and name. 2) A delivery server is breached or compelled to hand over stored chat data. Response: chats are locked on the device with NVL3 Quantum-Resistant end-to-end encryption before they leave the phone. On the server we keep only what delivery absolutely needs — sealed ciphertext packages and non-content routing metadata, not readable chat text. Those packages are not meant to be opened by us. They expire and are deleted automatically (hard maximum 28 days). Burning is always on — history is not kept forever on purpose. 3) Encrypted traffic is archived today for decryption with future quantum computers (harvest-now, decrypt-later). Response: NVL3 adds a quantum-resistant key-exchange layer on top of hardened end-to-end security. Post-quantum does not replace E2EE; it hardens the keys E2EE depends on. 4) Lock-screen and tray alerts leak names, message text, or calendar titles. Response: optional push never shows NEVULA, chat text, or real appointment titles — badge or short cover text only. 5) A voice note becomes a biometric recording of your real voice. Response: spoken words are understood on the device and re-spoken with a synthetic voice. Only that audio is sealed and sent; the original microphone capture is discarded. 6) Cloud backups or “full account restore” expose years of private life after a new phone or a leak. Response: Notes, Calendar, and Gallery stay in an on-device vault. Recovery restores only your NEVULA ID — not chats, contacts, media, notes, calendar, or old device keys. 7) Network observers watch who talks to whom on the open internet. Response: optional NevTOR (with Orbot) can require Tor per conversation. Encryption still applies with or without Tor. 8) Contact discovery becomes a public searchable directory of everyone — or media files leak location and device tags. Response: in-person QR pairing (or a sealed invite path), not a public directory of all identities. Where supported, extra photo/video file info (such as location or device tags) is stripped before Gallery storage or sending. PRIVATE MESSENGER NVL3 Quantum-Resistant E2EE on device before anything leaves the phone. Server-side we store only encrypted delivery packages — locked ciphertext, never openable as readable messages by us or third parties. Only the minimum required for delivery. One normal chat and one Tor chat per contact when you need both. Small groups via invite into an existing chat. Burning timers you choose, hard cap 28 days for everthing PRIVATE TOOLS ON THIS DEVICE Notes, Calendar (discreet reminders), and a private Gallery (capture or import; metadata stripped where supported). Shared copies expire with burning. ACCESS No email or phone number required for app identity. Entry PIN and destruction PIN stay on the device. Stay unlocked for a limited window if you choose. Local wipe and online account deletion are separate steps. Learn more: https://nevula.de Privacy & Security: https://nevula.de/privacy NEVULA is built for Android. Tor features need Orbot where used. Network conditions and device battery settings can affect background delivery on some phones.