Vaultlix
Vaultlix
Private by design
Encrypted
Menu
One private identity. People connect by consent.

Be known by your Vaultlix number—not your phone number.

Create your private identity, exchange Vaultlix numbers, and decide who can start an encrypted one-to-one conversation with you.

No phone numberNo email addressNo contact upload
01 · IdentifyReceive your permanent Vaultlix private number.
02 · ApproveAccept connection requests only from people you choose.
03 · ConnectMessage and call inside an encrypted conversation.
START HERE

Choose your private identity

2
DESIGNED TO LEAVE LESS BEHIND

Private conversations should remain inaccessible after they are erased.

With many messaging apps, deleted messages may remain recoverable from backups, stored copies, or device data.

Vaultlix minimizes retained message data and uses encryption and expiry controls so erased conversations are designed to remain inaccessible.

FeatureConventional messagingVaultlix
Sign-up identifierOften requires a phone numberNo phone number or email required
Contact accessMay request your address bookNo contact upload required
Private identityUsually tied to a phone number or emailA permanent Vaultlix private number
Voice and video callsDepends on the providerMedia is encrypted between participant devices
Operational metadataMay be collected broadlyMinimized to what is required to operate the service
Advertising identityMay connect activity to a wider ecosystemNo advertising identity required
HOW IT WORKS

From private number to private conversation.

Vaultlix replaces invitation codes and manual conversation setup with a familiar, direct connection flow.

01

Create your identity

Choose the username people will see. Vaultlix gives you a permanent private number.

02

Exchange numbers

Share only your Vaultlix private number. Your phone number, email, and contacts stay private.

03

Connect by consent

Enter the other person's number and send a request. A conversation appears after they accept.

04

Message or call

Communicate inside an encrypted one-to-one space created automatically in the background.

PRIVACY ARCHITECTURE

Designed to protect content and minimise identity.

Vaultlix separates the conversation from the identifiers that ordinary messengers often require. The security claims below describe the system precisely.

Encrypted messagesMessage content is encrypted between participants using AES-256-GCM. Vaultlix stores ciphertext, not readable message content.
Encrypted callsWebRTC media is protected between participant devices with DTLS-SRTP. Cloudflare TURN can relay encrypted packets and connection metadata, but cannot decrypt the media.
Identity-minimised accessYour Vaultlix private number works without collecting a phone number, email address, contact list, or real name.
Durable encrypted stateActive-conversation state and access data are checkpointed to restricted persistent storage for resilience and backups. Encrypted content remains unreadable to the service.
Optional account sync stores a client-encrypted account bundle. Infrastructure may process operational data needed to deliver the service, while message content and call media remain protected by their respective encryption layers.
SAFETY CONTROLS

Privacy also means control after the conversation begins.

Independent App LockProtect Vaultlix with a passcode separate from the device passcode.
Quick LockHide the active conversation immediately when privacy matters.
Emergency ExitRemove conversation access, erase this device, or delete the account through a deliberate, confirmed action.
Block and reportStop contact, report abuse, and discover account deletion from Settings.
FREQUENTLY ASKED QUESTIONS

The important questions, answered clearly.

What is Vaultlix?

Vaultlix is a private one-to-one messenger. It does not require your phone number, email address, contact list, or real name.

What identifies my account?

A permanent, system-generated Vaultlix private number and the username you choose. The number is not a cellular number and cannot receive SMS or ordinary calls.

How do I connect with someone?

Exchange Vaultlix private numbers, enter their exact number, and send a connection request. Once accepted, Vaultlix creates the encrypted conversation automatically.

Is Vaultlix end-to-end encrypted?

Yes. Messages are encrypted with keys held by the participants. Voice and video calls are encrypted between participant devices with DTLS-SRTP. A TURN service may relay encrypted call packets but cannot decrypt the call media.

Can people search for me?

No. Vaultlix does not search contacts or suggest people. Someone needs your exact private number before they can send a connection request.

Can more than two people join a conversation?

No. Vaultlix is designed exclusively for private, one-to-one communication.

Ready for your private number?

Create your Vaultlix identity, share only what you choose, and connect privately.

Privacy · Terms · FAQ · Sign in
📱 Install Vaultlix for the best experience · Tap Share → Add to Home Screen
Vaultlix
Private by design

Your identity belongs to you.

Vaultlix gives you a private number for encrypted conversations—without asking for your phone number, email, or contacts.

No phone number or email
No contact-list upload
Connections require your approval
Step 2 of 3

Set up your private identity.

Create a new Vaultlix Private Number, or sign in to an identity you already use.

Choose your username
Receive a permanent 10-digit Private Number
Protect it with your password and recovery code
Step 3 of 3

Know when someone reaches you.

Enable notifications for incoming calls, connection requests, and new encrypted messages. Message contents stay hidden from notification services.

You can change notification access later in Settings.
Create a conversation
Conversation ready
Send the link to one person.
They tap it, pick a name, you're connected.
Secret code
—
Tap to copy code
Waiting for the other person to join…
—
Private conversation
1 selected
🔒 Encrypted
⏱ Disappearing messages
0:00
Chats
Conversation erased
The conversation has been permanently deleted.
What was erased:
All messages · Conversation access · Connection details

What was never stored:
Your identity · Your device · Your location
Privacy Policy
Effective date: July 2026 · vaultlix.com
The short version: We don't ask for your public identity, and we can't read your conversations. When a conversation is erased, its live contents and access are removed — see below for exactly what that covers.

What we collect

Nothing that identifies you in real life. Vaultlix requires no email address, phone number, or real name. Accounts use a system-generated Vaultlix private number and your chosen username.

What exists on our servers is:

  • The encrypted content of messages, retained so it can be delivered to the other person for the conversation's lifetime; see "How long things last" below
  • The display name each person chooses for their Vaultlix identity
  • If notifications are enabled, a Web Push subscription (an endpoint address tied to your device, provided by Apple's or Google's push service) so a message or call can wake the app
  • Memory-hard authentication verifiers for identity sign-in — never the password itself
  • Standard server access logs generated by Railway (our hosting provider) which may include IP addresses and request timestamps
  • Anonymous, aggregate usage counts (for example, how many conversations are active) — never linked to a readable conversation, private number, or message
  • Your system-generated Private Number and chosen display name, encrypted key wrappers, active-session verifiers, and an opaque encrypted account bundle containing conversation credentials. We do not receive the password, recovery code, readable conversation list, access tokens, or private keys.

A conversation access token is created after a connection is accepted and kept on your device so the app can restore your conversations and route notifications correctly. It proves access to that conversation without being a real-world identity. Active encrypted state and access tokens are checkpointed to restricted persistent storage so the service can survive failures and backup restoration.

How messages work

All messages are end-to-end encrypted using AES-256-GCM with keys generated in your browser. The server never sees your message content — only encrypted ciphertext that it cannot read.

Encrypted conversation ciphertext, participant access data, chosen display names, notification routing details and access tokens are periodically written to restricted persistent storage. This lets conversations survive service failures and planned deployments. Infrastructure backups may retain an encrypted copy until the backup expires or is deleted; Vaultlix still cannot decrypt message ciphertext. Account records—including opaque encrypted account bundles and authentication verifiers—persist so a user can restore access after reinstalling.

How long things last

A conversation and its live message state are deleted immediately if either person uses "Close & erase." Established private-number connections remain available until someone closes them. Older encrypted infrastructure backups remain subject to the provider's configured retention period.

Disappearing-message timers, when enabled, delete an individual message from live storage as soon as its timer expires.

File attachments

Files are encrypted on your device before upload, transmitted as encrypted data, and delivered to the recipient. They follow the same conversation retention controls described above.

Voice and video calls

Call signaling is encrypted with the conversation's end-to-end encryption key. WebRTC then encrypts audio and video between participant devices using DTLS-SRTP. To prevent either participant from learning the other's IP address, Vaultlix routes call traffic through Cloudflare's TURN service. Cloudflare relays encrypted media packets and processes the connection metadata required to operate that relay, but cannot decrypt call audio or video. Vaultlix does not record or store call media.

Cookies and tracking

Vaultlix does not use cookies, analytics trackers, or advertising pixels, and does not use Google Analytics or an equivalent analytics service. Optional GIF search is provided by KLIPY as described below.

Third-party services

Vaultlix is hosted on Railway (railway.app). Railway may collect standard infrastructure logs including IP addresses. Please review Railway's privacy policy for details. We use Google Fonts for typography — fonts are loaded from Google's servers. Voice and video calls use Cloudflare's TURN service, which relays DTLS-SRTP-encrypted media packets and processes the connection metadata required to operate the relay but cannot decrypt call audio or video. Push notifications are delivered through Apple's and Google's respective push notification services, which see that a notification was sent to your device but not its content.

If you open the GIF picker, your device sends searches, language/region settings, and ordinary network information such as your IP address directly to KLIPY. When a GIF is displayed, the recipient's device loads it directly from KLIPY. The selected GIF reference is included inside the end-to-end encrypted Vaultlix message, but the GIF file itself is delivered by KLIPY and is not end-to-end encrypted by Vaultlix. Vaultlix does not send your private number to KLIPY or proxy, cache, or re-host KLIPY media.

Children's privacy

Vaultlix is not intended for use by anyone under the age of 18. We do not knowingly collect information from minors.

International users

Vaultlix is operated from India and this policy is governed by Indian law, as stated below. If you access Vaultlix from another country, you do so on the understanding that your data may be handled under Indian law; where the law of your own country grants you additional rights that cannot be waived, this policy does not limit those rights.

Legal requests and abuse reports

If we receive a valid legal request under applicable Indian law, we will review it and respond as required. What we can provide is limited to records that exist at that time, including encrypted conversation content, identity profile data and infrastructure logs. We cannot decrypt message content ourselves.

You can use Report and block in Conversation Safety, or contact legal@vaultlix.com. An in-app report contains the selected reason, optional details, report time, and one-way identifiers for the conversation and reporter. Up to five recent decrypted text messages are included only when you expressly choose to share them. Reports are access-restricted and automatically deleted after 90 days unless retention is needed for an active safety matter or legal obligation.

Changes to this policy

We may update this policy from time to time. Updates will be reflected on this page with a revised effective date.

Governing law

This policy is governed by the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.

Questions? Contact us at privacy@vaultlix.com
Terms of Service
Effective date: July 2026 · vaultlix.com
By using Vaultlix, you agree to these terms. If you do not agree, please do not use the service.

What Vaultlix is

Vaultlix is a private, encrypted messaging, voice, and video-calling service. Each user receives a Vaultlix Private Number and can exchange connection requests without providing Vaultlix a phone number, email address, contact list, or real name. Conversations are one-to-one and subject to the deletion and retention controls described in our Privacy Policy.

Acceptable use

You may use Vaultlix for any lawful purpose. You may not use Vaultlix to:

  • Transmit, distribute, or store any content that is illegal under applicable law
  • Harass, threaten, or harm any individual
  • Distribute child sexual abuse material (CSAM) or any content exploiting minors
  • Facilitate terrorism, violent extremism, or organised crime
  • Infringe on the intellectual property rights of others
  • Attempt to compromise the security or integrity of the service, except for good-faith security research conducted without harming users or disrupting the service, and reported to us responsibly at legal@vaultlix.com

No warranty

Vaultlix is provided "as is" without warranties of any kind. We do not guarantee that the service will be available, error-free, or suitable for your specific needs.

Limitation of liability

To the fullest extent permitted by law, Vaultlix and its operators shall not be liable for any direct, indirect, incidental, or consequential damages arising from your use of the service.

Privacy

Your use of Vaultlix is also governed by our Privacy Policy.

Termination

We reserve the right to terminate or restrict access to Vaultlix at any time, for any reason, without notice.

Abuse reports and legal process

To report suspected illegal activity, abuse, or a violation of the Acceptable use section above, contact legal@vaultlix.com. We may suspend an identity or disable a conversation if we believe it violates these terms.

We will cooperate with valid legal process to the extent legally required. Because Vaultlix minimizes retained data and encrypts message content, what we can provide is limited to the records that exist when a valid request is received; see the Privacy Policy for details.

Governing law

These terms are governed by the laws of India. Any disputes shall be subject to the exclusive jurisdiction of courts in Chennai, Tamil Nadu.

Contact

For any questions regarding these terms, contact us at legal@vaultlix.com

vaultlix.com · Anonymous Private Messaging · Chennai, India
Frequently Asked Questions
vaultlix.com

What is Vaultlix?

A private messaging and calling app built around a system-generated Vaultlix Private Number. People connect by exact number and mutual consent, without uploading contacts or providing a phone number or email address.

Do I need an account or a phone number?

No. Vaultlix does not require a phone number, email or real name. It gives you a system-generated Private Number for sign-in, recovery and exact-number connections.

Is it actually anonymous?

Vaultlix uses a system-generated Private Number and an opaque encrypted account bundle; no phone number, email or real name is collected. The Private Number is not a cellular number and cannot receive SMS or ordinary calls.

Is it end-to-end encrypted?

Yes. Messages are end-to-end encrypted with keys held by the participants. WebRTC call audio and video is encrypted between participant devices with DTLS-SRTP. Cloudflare TURN relays encrypted packets to hide participants' IP addresses from each other, but cannot decrypt call media. Conversation credentials are wrapped inside a separate client-encrypted account bundle before sync; Vaultlix cannot decrypt that bundle.

What happens when I close a conversation?

It's deleted immediately, for both people, along with everything inside it. Not archived, not hidden — gone.

How do private connections work?

Enter an exact Vaultlix Private Number and send a request. The other person must accept before a one-to-one conversation is created. Either person can later close and erase the conversation.

Can more than two people join?

No — Vaultlix is built for one-to-one conversations only.

vaultlix.com · Anonymous Private Messaging · Chennai, India
Vaultlix
Enter your independent Vaultlix passcode. The phone's passcode cannot unlock Vaultlix.
Settings
Profile
Private number, name, account and encrypted sync
Privacy & Security
App lock, blocking, account deletion and Emergency Exit
Notifications
Message sounds, alerts and device permission status
Chats
Conversation label, message controls and chat safety
Calls
Call privacy, permissions and audio routing guidance
Help
How to use Vaultlix, FAQ, policies and version
Language
Use your device language or choose another
App-wide
Vaultlix App Lock
Use an independent passcode and lock immediately in the background
Set up
Message chime
Play sound when a message arrives
Push notifications
Notify when messages arrive while away
Checking…
Vaultlix Private Number
Encrypted backup for your conversations and identity across devices
Set up
Call privacy and controls
Encrypted audio and video
Call media is encrypted between participant devices
Protected
Audio route
Choose phone, speaker, or an available Bluetooth device during a call
During call
Microphone and camera
Permissions are controlled by your phone’s system settings
Device
Language
The change applies immediately. Arabic uses a right-to-left layout.
Current conversation safety
Block participant
Stop contact through this conversation and erase its access from this device
Report and block
Report abuse, then immediately block this participant
Delete Account
Permanently delete your account, conversations, encrypted bundle, and every signed-in session
Current conversation —
Label this conversation
A private label visible only to you and included in your encrypted account sync
Clear chat
Erase all messages for both participants while keeping the connection open
About
Vaultlix
FAQ and how to use Vaultlix
Private numbers, conversations, calls, deletion, and safety
Privacy Policy
How we handle your data
Terms of Service
Rules for using Vaultlix
Vaultlix · Version 1.0
Anonymous · Encrypted · Unreadable to us