End-to-end encrypted calls and chat that work through your browser. No account, no app store, no platform tax. Your identity is one key file that lives only on your devices.
Y is a Progressive Web App — it lives in your favorite browser, claims your home screen with one tap, and weighs 0 MB. Browsers ship the runtime; you don't download anything.
A regular app is a 100+ MB download from a centralized store. The store decides what's allowed, takes a cut of every transaction, and tracks how you use the app it lets you have.
A Progressive Web App is the same app code — but the runtime is the browser you already have. There's no store, no review queue, no platform tax, and no native-app tracking SDK by default. When you "install" a PWA, your browser doesn't download a separate program; it just claims a launchable shortcut on your home screen and remembers a tiny service worker that lets the app run when the tab is closed.
That's how Y can ring your locked phone the way Apple's or Google's services do, while remaining open code that anyone can audit.
Your browser generates an ECDSA + RSA keypair. The public half is your address — others use it to call or message you. The private half stays on this device and is never sent to the server. Lose the key file → lose the identity. By design, there is no recovery.
Shown to peers when you call or message them. You can use anything. Not a username — anyone can pick the same nickname.
This file is the only way to use this identity on another device or after clearing your browser. There is no recovery.
Save it somewhere only you can reach — password manager, encrypted drive, paper backup.
Y is a web app, not a native one — so to ring you when your phone is asleep, your browser needs notification permission. Without this, calls won't reach you when the screen is locked.
On iPhone you have to install Y first (Share → Add to Home Screen). iOS only allows web push from installed PWAs.
Drop a .json file you exported from another device, or tap to choose.
Loading…
Pick a recent contact below or paste a base58 address. Video + audio go peer-to-peer; this server only relays signalling.
idle
is calling you on Y · end-to-end encrypted
Ringing · they'll see you on their lock screen.
DMs and rooms — end-to-end encrypted in the browser. The server only ever sees ciphertext.
People in your circle. Each contact lives only on this device — encrypted, never on the server. Tap a contact to open their card.
No contacts yet. When you call someone — or they call you — Y will offer to save them here. You can also paste a base58 address with the + Add contact button above.
Stored on this device only. A soft 🎂 ribbon will appear on the contact card on the day.
A landscape image used as the backdrop on this contact's detail and on the call screen when you're with them.
Plays when this person calls you and the app is open. Falls back to your default if blank.
Messages exchanged via WebRTC DataChannel during calls. Stored on this device.
What the AI remembers about you across every conversation. Encrypted in this browser with your private key — server stores ciphertext only.
No memories yet. Add anything you'd like Sphere 1 to know about you. It stays encrypted; only your device can read it.
Your tools, your defaults. Everything stays on this device unless you explicitly export.
Your keypair lives in this browser. Export it to use this same identity on another device — and to save a backup.
Pick the digital twin that represents you across the app — Sphere 1, calls, contacts, settings. Switching is instant; nothing leaves your device.
If you forget you're signed in, this device auto-removes the keys after a period of inactivity. Off by default — turn it on if others use this device.
Pick a voice for Sphere 1 and the AI. Quality varies by browser — Apple Premium / Microsoft Online Natural / Google Network voices are top-tier and free.
Run Y as an installed app — it survives tab close, opens faster, and on iPhone is required for call alerts.
Notify this device when someone calls — even if the tab is closed.
Test how Y behaves with no network. Toggle on to disconnect; toggle off to reconnect and sync. Live calls require connection — every other feature is being rebuilt to work locally and sync when you're back online.
Your encrypted contacts are stored on up to 11 of your peers' devices. The server only routes — it never sees the contents. If you wipe this browser, you can recover from any peer who's online.
Hold the 🤖 button during a call to ask Sphere 1 — voice in, voice out. STT + TTS run in your browser; only the transcript reaches the server (same path as the regular Sphere 1 page). Disabled if your browser lacks the Web Speech API (Firefox).
Pick a global vibe. The seven-color rainbow on each pane stays the same — only the meta-look changes (background, ink, accent).
Encrypt your full local state (identity, contacts, twin entries, theme + avatar choices) into a passphrase-wrapped file. Use it to restore on a fresh device or browser. Different from the per-key file (which only carries the keypair). Chromium desktop saves directly to disk; other browsers download a file you re-upload to import.
SW 0.15.2 · service y_pwa.service · port 5001