Evidence and risk■Verified evidence/△CautionMaterial claims checked against current sources.; those sources show trade-offs worth reading.
Last reviewedReviewed 25 Aug 2026KYC checked 25 Aug 2026 · unknown jurisdiction · Source → official siteHow to cite this pageSource coverageVerified evidenceRecorded riskCaution
Evidence and facts
Evidence and facts
CUNICULA SCORE 4.0
35/100△Limited evidencePrivacy 12/25 · Control 0/20 · Transparency 0/20 · Security 17/25 · Accountability 6/10 · Cap 69 · Method
JURISDICTIONUnknown
CAUTIONThe published web privacy policy says delivered messages are not retained and data is not sent to remote servers, but current clients use Nostr relays and Android 2.0.1 persists private conversation history locally. Bluetooth exposes proximity/relay patterns, Nostr relays can observe connection metadata, and a persistent device identifier is derived from the identity key.
AUDITED BYNo audit listed
OPERATOR DATANo hosted operator data recorded
SOURCE COVERAGE
■Verified evidenceTHIRD-PARTY REPORTED8/8Reviewed 25 Aug 2026 · Source → official site
LAST CHECKED2026-08-25
LAST UPDATED2026-08-25
Specs
DOCUMENT CHECKNone recorded
IDENTITY EXPOSURELevel 0/4
KYC TRIGGERSNo account or identity KYC surface found on the official site; distribution through app stores/GitHub can still expose platform metadata.
FEEFree
NETWORKSBluetooth Mesh, Nostr
CATEGORIESMessaging, Offline, Bitcoin
COMMON USESNearby offline messaging, Phone-number-free messaging, Open-source mesh testing
FEATURESOpen source, Bluetooth mesh, Nostr transport, No account, No phone number, Private messages, Emergency wipe, Wear OS, +3 more
TORNot listed
REGIONSGlobal availability
Review analysis, source material, related services, and history
About
Peer-to-peer messaging over Bluetooth mesh and Nostr relays, with device-held identity keys, no account, and optional persistent local history.
Analysis
OVERVIEW
Bitchat uses Bluetooth mesh for nearby offline messaging and Nostr relays for wider reach. It requires no account or phone number and keeps identity keys on the device.
LIMITS
Bluetooth can expose proximity and relay patterns. Nostr relays can observe connection metadata. The app derives a persistent device identifier from its identity key.
USEFUL FOR
Nearby messaging without internet access or a central account.
No identity verification is recorded for typical use. No account or identity KYC surface found on the official site; distribution through app stores/GitHub can still expose platform metadata.
Which payment methods are accepted?
Accepted payment methods: Bluetooth Mesh, Nostr.
Where is it available?
Recorded availability: GLOBAL.
Is the operator based in a Five Eyes country?
The jurisdiction is not publicly confirmed. Check the provider site for incorporation details.
How are identity, operator, and evidence fields reported?
Identity exposure is level 0 of 4. No hosted operator data is recorded. Jurisdiction is shown as context, not a safety verdict. Source coverage is verified evidence, last reviewed 2026-08-25, and recorded risk is caution.
No changes to the document we watch since we started checking on 9 Aug 2026. Last checked 9 Aug 2026.
Evidence basis: Claims on this page are linked to published sources for comparison, not certification, audit, endorsement, or recommendation; read the methodology and coverage map before relying on an entry.
Service history
Latest meaningful changes to the facts shown on this provider page.
Apply full-service rereview and score 4.0
Checked at, Description, Features, KYC last checked, and 6 more
Corporate registry information updated
Corporate
Provider presentation updated
Best for, Checked at, Description, Evidence status, and 11 more
Full service history
updated
Reconcile score 4.0 evidence
Score assessment / Control model
decentralized → unknown
Score assessment / Operator data exposure
none → unknown
Score assessment / Source model
open → unknown
Score review
not set → Outcome: PASS; Checked at: 2026-08-25; Inputs: Operator data exposure: unknown; Control model: unknown; Source model: unknown; Audit: Score eligible: no; Reason: No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit.
Peer-to-peer messaging over Bluetooth mesh and Nostr relays, using device-held identity keys and no account. → Peer-to-peer messaging over Bluetooth mesh and Nostr relays, with device-held identity keys, no account, and optional persistent local history.
Features
Open source, Bluetooth mesh, Nostr transport, No account, No phone number, Private messages, Emergency wipe → Open source, Bluetooth mesh, Nostr transport, No account, No phone number, Private messages, Emergency wipe, Wear OS, Live push-to-talk, Persistent local conversations, Cashu token preview/redemption
KYC last checked
2026-08-05 → 2026-08-25
Last reviewed
2026-08-05 → 2026-08-25
Privacy warning
Bluetooth can expose proximity and relay patterns. Nostr relays can observe connection metadata. A persistent device identifier is derived from the identity key. → The published web privacy policy says delivered messages are not retained and data is not sent to remote servers, but current clients use Nostr relays and Android 2.0.1 persists private conversation history locally. Bluetooth exposes proximity/relay patterns, Nostr relays can observe connection metadata, and a persistent device identifier is derived from the identity key.
Source reviewed
official documentation → primary_source_rereview_2026-08-25
Score assessment
not set → Operator data exposure: none; Control model: decentralized; Source model: open
Peer-to-peer messaging over Bluetooth mesh for nearby use and Nostr relays for wider reach. It has no account or phone-number requirement and uses device-held identity keys. → Peer-to-peer messaging over Bluetooth mesh and Nostr relays, using device-held identity keys and no account.
Bluetooth mesh chat app for internet-independent, multi-hop local messaging. Official site positions it for censorship resistance, surveillance resistance and infrastructure-independent communication; app-store and software links are live. → Peer-to-peer messaging over Bluetooth mesh for nearby use and Nostr relays for wider reach. It has no account or phone-number requirement and uses device-held identity keys.
Evidence status
not set → verified
Features
not set → Open source, Bluetooth mesh, Nostr transport, No account, No phone number, Private messages, Emergency wipe
KYC last checked
2026-06-22 → 2026-08-05
Last reviewed
2026-06-22 → 2026-08-05
Networks
FOSS, Bluetooth Mesh, Cashu → Bluetooth Mesh, Nostr
No hosted operator data
not set → yes
Privacy warning
Bluetooth/local mesh participation can expose proximity, device and relay metadata; Cashu/ecash wallet use depends on mint and wallet OPSEC. → Bluetooth can expose proximity and relay patterns. Nostr relays can observe connection metadata. A persistent device identifier is derived from the identity key.
Source reviewed
official site → official documentation
Recorded risk
not set → caution
Tagline
A privacy-preserving tool offering genuine utility. → Account-free Bluetooth and Nostr messaging.
Launched by Jack Dorsey. A Bluetooth mesh chat application (IRC vibes) that transforms phones into a relay network for messages with no internet required. Now supports a native Cashu wallet for offline ecash. → Bluetooth mesh chat app for internet-independent, multi-hop local messaging. Official site positions it for censorship resistance, surveillance resistance and infrastructure-independent communication; app-store and software links are live.
Jurisdiction
not set → ??
KYC last checked
2026-03-13 → 2026-06-22
Kyc note
Advertises No-KYC, but strictly adhere to OPSEC rules. Access via Tor, pay with XMR. → No account or identity KYC surface found on the official site; distribution through app stores/GitHub can still expose platform metadata.
Last reviewed
2026-03-13 → 2026-06-22
Privacy warning
not set → Bluetooth/local mesh participation can expose proximity, device and relay metadata; Cashu/ecash wallet use depends on mint and wallet OPSEC.
Source reviewed
older source, not independently verified → official site