Frequently Asked Questions

Zero ambiguity. Zero trust required.

General & Philosophy

Who is behind Arpokrat?
We are a private company based in Zug, Switzerland, operating with complete independence. We have no ties to and receive no funding from Big Tech. We believe that personal data should never be used for enrichment. You are the owner of your own data. This is why we build services requiring the absolute minimum amount of personal information.
Why did you choose Switzerland?

Geography is part of our security model. Switzerland offers three critical advantages:

  • Outside “14 Eyes”: Switzerland is not part of the US/EU mass surveillance intelligence alliances.

  • Legal Protection: The Swiss Federal Data Protection Act (FADP) is one of the strictest in the world.

  • Neutrality: Political stability allows us to operate without government interference.

Why did you create these products?

Because the current internet is broken. Today, “free” services (like Gmail or Meta) come at the cost of your digital soul. Your location, conversations, and habits are auctioned to the highest bidder.

We believe privacy is a fundamental human right, not a setting to be toggled. We built Arpokrat so you can communicate without being traced, profiled, or sold.

Should I trust Arpokrat?
No. “Trust us” is a security hole. That is why we built a Zero-Trust Architecture. We don’t ask for your trust; we prove our integrity through open-source code and mathematics. Our systems are designed so that even if we wanted to spy on you, we couldn’t. We cannot read your messages or access your keys.
Do you use Cookies on your website?
No. Absolute Zero. You will not find a “Cookie Banner” on this site because we have nothing to declare. We do not track your behavior, we do not use analytics, and we do not serve ads. Our website is stateless and respects your browser’s privacy settings by default.
Do you sell physical phones?

No. We provide the software (ArpokratOS), but you must provide the hardware (Google Pixel). This is a deliberate security choice called Supply Chain Security.

If we shipped you a phone, it could be intercepted and tampered with during shipping (interdiction). By buying a sealed Pixel locally and flashing it yourself via our WebFlasher, you guarantee that the hardware has not been compromised.

What is your Data Privacy Policy?

Our policy is summarized in one sentence: We cannot leak what we do not collect.

We keep zero logs. We know zero metadata. We require zero personal information. Our servers run on RAM-disk and are wiped instantly upon power loss. For the full legal details, please read our Privacy Policy .

Do you offer solutions for Enterprises?
Yes, coming soon. We are currently developing a dedicated B2B ecosystem for corporations, journalists, and legal firms requiring defense against industrial espionage. This will include Fleet Management and private hosted nodes. Contact us for early access.
Do I need to create an account?
No. There are no user accounts, no passwords to reset, and no emails to verify.

ArpokratOS & Installation

Which devices are supported?
Currently, we strictly support the Google Pixel 8. We are working on expanding support to the Pixel 8 Pro, 8a, and the Pixel 9 series in the near future.
Why only Google Pixel? Why not iPhone, Samsung, or Xiaomi?
Security requires specific hardware. Google Pixel devices (8 through 10) are equipped with the Titan M2 security chip, which allows for Verified Boot with custom cryptographic keys. Other brands (Apple, Xiaomi, Samsung) operate as “walled gardens” and do not allow us to fully replace the operating system at the root level without compromising security integrity.
Do I need technical skills to install it?
No. You do not need to be a developer. We have simplified the process into a few detailed steps. If you can follow a recipe, you can secure your phone.
What does "flashing" mean?
“Flashing” is the process of completely wiping the stock Android operating system provided by Google and replacing it with ArpokratOS. It overwrites the internal memory of the phone to ensure no trace of the original software remains.
How do I flash my phone?
You will need a computer and a USB cable. Simply follow our step-by-step guide available here: How to Install .
Is my data encrypted?
Yes. The entire disk is encrypted using high-entropy keys derived from your password and the Titan M2 chip. Without your password, the data is mathematically indistinguishable from random noise.
What happens if I lose my phone?
Consider it a brick. Since we do not hold your keys, no one can decrypt it. Your data remains inaccessible forever.
What type of password should I choose?
We recommend a strong alphanumeric password (letters, numbers, symbols) of at least 8 characters. A simple 4-digit PIN is not sufficient against modern brute-force attacks.
What happens after 3 wrong password attempts?
The device initiates a Security Wipe. All data on the phone is instantly and irreversibly cryptographically wiped. This protects you if someone tries to force-guess your password.
What is the Nuke PIN?
The Nuke PIN is a duress code. If someone forces you to unlock your phone under threat, you enter this specific password. All data on the phone will be instantly and irreversibly wiped.
What is the Panic Button?
This is a physical trigger (a specific combination of button presses) that allows you to wipe the phone instantly from your pocket, without needing to look at the screen.
Why does it reboot automatically every 4 hours?
If the phone is not unlocked for 4 hours, it reboots. This flushes the RAM (volatile memory) where encryption keys are temporarily held while the phone is active. This puts the phone back into a “Before First Unlock” (BFU) state, which is the most secure state against extraction.
Can I track/locate the phone?
No. The GNSS (Global Navigation Satellite System, commonly known as GPS) driver is disabled at the Kernel level. The Kernel is the core program that manages the phone’s hardware. By disabling it there, we ensure that the hardware simply cannot communicate your location to the software.
How do I update ArpokratOS?
You cannot update via the internet (OTA). To update, you must re-flash the phone. We disabled Over-The-Air updates because they represent a significant remote attack vector. Security requires effort.
Can I browse the internet?
Yes, using the pre-installed privacy browser and the search engine DuckDuckGo. We strongly advise against using Google or Bing, as this defeats the purpose of the phone.
Can I install apps?
Technically, yes, by downloading the APK file (Android Package Kit, the installer file for apps) directly. However, we strongly advise against installing third-party apps. Every app you install increases your attack surface and potential for data leakage.
Can I make calls and send SMS?
Yes, standard GSM calls and SMS work if you insert a SIM card. However, these are not encrypted and can be intercepted by telecom providers. We recommend using the native Arpokrat Messenger for all communication.
Can I receive emails?
Not yet. We are currently developing a secure, metadata-free email client. For now, ArpokratOS is focused on instant communication.
What if I change my phone?
The license is tied to the device to ensure security integrity. If you switch to a new phone, you will need to purchase a new license.

Arpokrat Messenger

Is Arpokrat Messenger available on iPhone and other Androids?
Yes. While ArpokratOS is exclusive to Pixel, the Arpokrat Messenger application is available on the iOS App Store, Google Play Store and F-Droid. It is compatible with all modern smartphones. We are also developing desktop versions for Windows, Mac, and Linux, coming soon.
What is Post-Quantum Encryption (PQC)?
Standard encryption used by apps like Signal or WhatsApp will likely be broken by future Quantum Computers (a threat known as “Harvest Now, Decrypt Later”). Arpokrat Messenger protects you against this future threat today by using next-generation algorithms (Kyber/Dilithium) that are mathematically resistant to quantum attacks.
Do I need a phone number or email?
No. Absolutely nothing. Your identity is a cryptographic key pair generated locally on your device. We do not know who you are, and we do not link your account to any real-world identity.
Is everything encrypted?
Yes. Every message, file transfer, voice call, video call, and transaction is End-to-End Encrypted (E2EE). Only you and the recipient can decrypt the content. Even we cannot see it.
What metadata do you store?
None. We use the SimpleX protocol, which changes the paradigm entirely. Unlike other apps, Arpokrat Messenger has no user identifiers (no phone numbers, no emails, not even random user IDs). The relays only see temporary, anonymous message queues. They cannot build a “social graph” of who is talking to whom.
How do I add a contact without a phone number?
Since there are no phone numbers, you connect via a Direct Exchange. You can scan your contact’s QR Code in person, or generate a unique “Deep Link” inside the app and share it via another secure channel.
What happens if I am offline?
If you are offline, messages sent to you are temporarily stored on our decentralized blind relays. These relays hold encrypted “blobs” of data they cannot read. Once you come online, the message is delivered and instantly deleted from the relay.
Does it have the same features as WhatsApp or Telegram?
Yes. You do not have to sacrifice usability for security. Arpokrat Messenger supports voice messages, file sharing, stickers, replies, and group chats, just like the apps you are used to.
Can I use the Tor network?
Yes. You can route all traffic through the Tor network by simply enabling the option in the settings. This masks your IP address from the relays and your internet provider.
Can I lock the app?
Yes, you can secure the app with a separate PIN, adding a second layer of defense even if your phone is unlocked.
Can I backup my chats?
Yes, you can create a local encrypted backup of your conversations to transfer them to a new device. However, you are responsible for storing this backup securely.
Is the Wallet a separate app?
No. The Wallet and Swap features are built directly into the Arpokrat Messenger application. You do not need to download or manage a separate app. You can chat and send funds in the same secure environment.
Is the built-in wallet non-custodial?
Yes. “Not your keys, not your coins.” You possess the private keys (Seed Phrase) to your wallet. Arpokrat has absolutely no access to your funds and cannot freeze your account.
Which cryptocurrencies are supported?
Currently, we support Monero (XMR) for privacy and USDT for stability. We plan to add more assets in future updates.
Can I send fiat currency (USD, EUR)?
No. We only support cryptocurrencies. Integrating fiat currency would require partnerships with traditional banks and enforcing KYC (identity verification), which strictly violates our zero-data policy.
Can I send money to contacts?
Yes, you can send crypto directly within the chat interface, as easily as sending a photo. Transfers are settled instantly on the blockchain.
Can I swap currencies?
Yes, the integrated Swap feature allows you to exchange XMR for USDT (and vice versa) instantly without leaving the application.
Do I need to provide personal info (KYC)?
No. There are no KYC (Know Your Customer) checks, no ID scans, and no transaction limits. You have total financial sovereignty.
What are the fees?
We charge a flat fee of 0.25% per swap and 0.25% per transfer to support the development of the ecosystem. These are among the lowest fees in the industry for non-custodial services.

Infrastructure & Blind Relays

What is a decentralized relay network?
Unlike centralized apps (WhatsApp/Signal/Telegram) where all data flows through one company’s servers, Arpokrat uses a mesh of independent relays. These are secure “drop-off points” for messages. If one node goes down, the network routes around it. There is no central point of failure or control.
Why do we need relays?
Mobile devices cannot always maintain a direct connection to each other (due to firewalls, NAT, or being offline). Relays act as blind intermediaries. They hold encrypted data packets temporarily until the recipient comes online to retrieve them, ensuring 100% delivery reliability without central storage.
How do "Blind" relays work?
The relays are ‘blind’ because they operate on a Zero-Knowledge basis. They receive a cryptographically locked box and drop it into a temporary anonymous queue. They do not have the keys to open the box, and critically, they do not know the identity of the sender nor the recipient. They simply route encrypted data packets without understanding the social graph.
Where are your servers located?
Our nodes are strategically distributed in jurisdictions that prioritize data sovereignty: Switzerland, Iceland, Panama, South Africa, and Malaysia. Learn more about our locations on our Infrastructure Page .
Why did you choose these jurisdictions?
We selected these countries for their strong legal frameworks regarding privacy, their political neutrality, and their independence from the “14 Eyes” intelligence alliances. This legal diversity prevents any single government from pressuring the entire network. Full details available at Infrastructure .
Are the servers secure?

Yes. We use a high-grade setup:

  • Read-Only OS: The operating system is immutable. Even if a hacker gained access, they could not install malware or backdoors.
  • RAM-Only: The servers have no hard drives for storage. All data lives in the volatile memory (RAM). If the power is cut all data vanishes instantly.
Do you keep server logs or IP metadata?
No. We have disabled logging at the server daemon level. We do not record IP addresses, connection timestamps, or routing history. Since the architecture is RAM-only, there is physically nowhere to write these logs.
Can I launch my own private relay?
Yes. For enterprises or organizations requiring total sovereignty, we offer a bespoke service to deploy dedicated private relays. This allows you to keep all encrypted traffic within your own infrastructure. Please Contact Us for a quote.

Payment & License

What payment methods do you accept?

We primarily accept cryptocurrencies (Bitcoin, Ethereum, Monero, USDT, USDC, POL) for speed and maximum privacy.

However, we also accept secure credit card payments (Visa/Mastercard). Card transactions are processed by a fully regulated Swiss PSP (Payment Service Provider) to ensure your financial data remains under strict Swiss legal protection.

How long does delivery take?
Instantly. As soon as the transaction is confirmed, our system automatically generates your license key and grants you access to the WebFlasher. You can install the OS on your phone immediately after paying.
I don't have crypto. Where can I buy some?
If you are new to crypto, we recommend using Mt Pelerin . It is a regulated Swiss intermediary that allows you to buy crypto via bank transfer with No KYC (no identity verification) for amounts up to CHF 1,000 (approx. €1,000) per day, or by card with minimal KYC. It aligns with our values of Swiss reliability and privacy.

Still have questions?

Contact Support