# Edel (EDEL)

> Paid, invite-only, end-to-end encrypted 1:1 messenger. The server relays opaque
> envelopes and cannot read messages. Web client and Android APK (no Google Play
> Services). No iOS app, by policy. Every security claim is tied to an artifact you
> can fetch and check.

Canonical site: https://edel.chat/
Verification page: https://edel.chat/verification.html
Audit facts (source of truth): https://edel.chat/verification.html
Last reviewed: 2026-11-04

## What Edel is

- Product: Edel — the most **verifiable** private chat (we do not claim "the most
  secure in the world"; see "Claims policy").
- Architecture: Go server, vanilla-JS web client, Kotlin Android app. 1:1 chats only.
- Crypto: Ed25519, X25519, XChaCha20-Poly1305; double encryption (XChaCha20-Poly1305
  inside AES-256-GCM).
- Server role: relays opaque envelopes, deletes offline messages after a signed ACK,
  and cannot decrypt message content.
- Access: paid and invite-only. No ads, no strangers, no message reading.
- Platforms: web + Android APK. iOS: no app, by policy. Desktop: no native app.

## Pricing (live source: GET /api/v1/price)

- Packages are **one-time purchases**, not a subscription. "Membership" / "elite club"
  means a one-time package; the money funds development and support.
- Tiers: 2 invites / 5 invites / 10 invites. Prices: $10 / $20 / $35.
- Base price: P(N) = 10 + 990 * (N / 100000)^2 USD, where N is the member counter.
- Payment: USDC or USDT on Base to 0x04844A24aBF795eE82B051DE0f4a6A575c39b751.
- The static floor on the landing page ("from $X per invite") is refreshed by
  scripts/sync-prices.ps1; exact packages come from the API.

## Verifiable artifacts

- https://edel.chat/manifest.json — SHA-256 of every served file.
- https://edel.chat/manifest.sig — Ed25519 signature over manifest.json.
- Pinned public key (Ed25519, base64): dlCB6TeyJ3fRdbbY4rcIQQ5Qv0A4wAauJwUSFKhivTM=
- Browser verifier: web/src/integrity.js (verifies the signature first, then hashes
  every .js/.mjs/.html and fails closed).
- https://edel.chat/api/v1/version — APK version, size and SHA-256.
- https://edel.chat/api/health — server status, version and build.
- https://edel.chat/.well-known/security.txt — security contact and disclosure policy.

## What is NOT true (stated honestly)

- No third-party security audit yet; an internal self-audit exists only.
- The source repository is private. We do not claim "open source".
- No bug bounty.
- Metadata (who talks to whom, when; coarse presence) is visible to the server.
  Message content, names and keys are not.
- No FCM/background push: delivery while the app is closed is not guaranteed.
- No group chats or channels.

## Platform policy

- Android: APK for Android 7+, no Google Play Services, auto-update from our server.
- Web: any modern browser; keys stay on the phone; QR pairing.
- iOS: no app and none is planned. Reason: the threat model requires an OS the project
  controls and can reason about; documented cases of data access at the OS level make
  iOS unsuitable for confidential messaging. This is the project's assessment and
  policy, not an accusation against Apple.
- Windows/macOS/Linux: no native app; use the web client.

## Claims policy

- If a security claim has no artifact URL, it is not a claim we make.
- We do not use unverifiable superlatives. Positioning: "the most verifiable private
  chat", not "the most secure in the world".
- When this file conflicts with a marketing page, this file wins. Report conflicts to
  security@edel.chat.

## Contact

- security@edel.chat
- postmaster@edel.chat
- abuse@edel.chat
- dmarc@edel.chat
- https://edel.chat/verification.html#contact

## Crawling

- robots.txt explicitly allows Googlebot, Google-Extended, Bingbot, YandexBot, GPTBot,
  OAI-SearchBot, ClaudeBot and PerplexityBot.
- Google Search does not read llms.txt; this file is for AI agents and agents that
  build answers from retrieved pages.