Connect privately, without sharing your public identity.
Create a permanent Vaultlix private number, share it only with people you choose, and start encrypted one-to-one conversations.
No phone numberNo email addressNo contact upload
START HERE
Start with your private number
2
Open in Safari to install Vaultlix
DESIGNED TO LEAVE LESS BEHIND
Private conversations should remain inaccessible after they are erased.
With many messaging apps, deleted messages may remain recoverable from backups, stored copies, or device data.
Vaultlix minimizes retained message data and uses encryption and expiry controls so erased conversations are designed to remain inaccessible.
FeatureConventional messagingVaultlix
Sign-up identifierOften requires a phone numberNo phone number or email required
Contact accessMay request your address bookNo contact upload required
Private identityUsually tied to a phone number or emailA permanent Vaultlix private number
Voice and video callsDepends on the providerMedia is encrypted between participant devices
Operational metadataMay be collected broadlyMinimized to what is required to operate the service
Advertising identityMay connect activity to a wider ecosystemNo advertising identity required
HOW IT WORKS
From private number to private conversation.
Vaultlix replaces invitation codes and manual room setup with a familiar, direct connection flow.
01
Create your identity
Choose the name or pseudonym people will see. Vaultlix gives you a permanent private number.
02
Exchange numbers
Share only your Vaultlix private number. Your phone number, email, and contacts stay private.
03
Connect by consent
Enter the other person's number and send a request. A conversation appears after they accept.
04
Message or call
Communicate inside an encrypted one-to-one space created automatically in the background.
PRIVACY ARCHITECTURE
Designed to protect content and minimise identity.
Vaultlix separates the conversation from the identifiers that ordinary messengers often require. The security claims below describe the system precisely.
Encrypted messagesMessage content is encrypted between participants using AES-256-GCM. Vaultlix stores ciphertext, not readable message content.Encrypted callsWebRTC media is protected between participant devices with DTLS-SRTP. Cloudflare TURN can relay encrypted packets and connection metadata, but cannot decrypt the media.Identity-minimised accessYour Vaultlix private number works without collecting a phone number, email address, contact list, or real name.Durable encrypted stateActive-vault state and access data are checkpointed to restricted persistent storage for resilience and backups. Encrypted content remains unreadable to the service.
Optional account sync stores a client-encrypted account bundle. Infrastructure may process operational data needed to deliver the service, while message content and call media remain protected by their respective encryption layers.
SAFETY CONTROLS
Privacy also means control after the conversation begins.
Independent App LockProtect Vaultlix with a passcode separate from the device passcode.Quick LockHide the active conversation immediately when privacy matters.Emergency ExitRemove conversation access, erase this device, or delete the account through a deliberate, confirmed action.Block and reportStop contact, report abuse, and discover account deletion from Settings.
FREQUENTLY ASKED QUESTIONS
The important questions, answered clearly.
What is Vaultlix?
Vaultlix is a private one-to-one messenger. It does not require your phone number, email address, contact list, or real name.
What identifies my account?
A permanent, system-generated Vaultlix private number and the name or pseudonym you choose. The number is not a cellular number and cannot receive SMS or ordinary calls.
How do I connect with someone?
Exchange Vaultlix private numbers, enter their exact number, and send a connection request. Once accepted, Vaultlix creates the encrypted conversation automatically.
Is Vaultlix end-to-end encrypted?
Yes. Messages are encrypted with keys held by the participants. Voice and video calls are encrypted between participant devices with DTLS-SRTP. A TURN service may relay encrypted call packets but cannot decrypt the call media.
Can people search for me?
No. Vaultlix does not search contacts or suggest people. Someone needs your exact private number before they can send a connection request.
Can more than two people join a conversation?
No. Vaultlix is designed exclusively for private, one-to-one communication.
Ready for your private number?
Create your Vaultlix identity, share only what you choose, and connect privately.
📱Install Vaultlix for the best experience · Tap Share → Add to Home Screen
Vaultlix
Create a vault
Not your real name — just for this conversation
A label so you can recognise this vault. We'll add a random suffix to keep the code private.
Vaultlix
Vault ready
Send the link to one person. They tap it, pick a name, you're connected.
Secret code
—
Tap to copy code
Waiting for the other person to join…
—
Private vault
1 selected
🔒Encrypted
⏱ Disappearing messages
0:00
Chats
Vault erased
The conversation has been permanently deleted.
What was erased: All messages · Vault code · Connection details
What was never stored: Your identity · Your device · Your location
Vaultlix
Privacy Policy
Effective date: July 2026 · vaultlix.com
The short version: We don't ask who you are, and we can't read your conversations. When a vault closes, its contents are gone — see below for exactly what that covers.
What we collect
Nothing that identifies you in real life. Vaultlix requires no email address, phone number, or real name. Accounts use a system-generated Vaultlix private number and your chosen name or pseudonym.
What exists on our servers is:
The encrypted content of messages, held in server memory so it can be delivered to the other person — not "in transit" only, but for the vault's lifetime; see "How long things last" below
The display name each person chooses when creating or joining a vault
If notifications are enabled, a Web Push subscription (an endpoint address tied to your device, provided by Apple's or Google's push service) so a message or call can wake the app
If a vault is created with a password, a one-way cryptographic hash of that password (scrypt) — never the password itself
Standard server access logs generated by Railway (our hosting provider) which may include IP addresses and request timestamps
Anonymous, aggregate usage counts (for example, how many vaults are created and whether they're temporary or permanent) — never linked to a specific vault, code, or IP address, kept indefinitely as running totals only, and used only to understand which features are actually useful
If you create a Vaultlix identity: its system-generated Private Number and chosen display name, memory-hard authentication verifiers, encrypted key wrappers, active-session verifiers, and an opaque encrypted bundle containing your vault credentials. We do not receive the password, recovery code, readable vault list, room tokens, codenames, or private keys.
Your session token is created by the server when you open or join a vault, then kept on your device too — in your browser's own localStorage, so the app can restore your open vaults if you reload or reopen it, and in IndexedDB if notifications are enabled, so a push notification can be matched to the right vault without a browser tab needing to be open. It travels with each request to prove you belong to that vault. It isn't a real-world identity and stops working when the vault closes. While a vault is open, its encrypted state and access tokens are periodically checkpointed to restricted persistent storage so it can survive service failures and backup restoration.
How messages work
All messages are end-to-end encrypted using AES-256-GCM with keys generated in your browser. The server never sees your message content — only encrypted ciphertext that it cannot read.
Encrypted conversation ciphertext, vault membership data, chosen display names, notification routing details and access tokens are held in memory and periodically written as an atomic checkpoint to restricted persistent storage. This lets active vaults survive service failures, planned deployments and volume-backup restoration. Railway volume backups may retain a checkpoint until that backup expires or is deleted. Vaultlix still cannot decrypt message ciphertext. Closing or expiring a vault removes it from the live checkpoint; older backup copies remain subject to Railway's configured backup-retention period. Optional anonymous-account records—including opaque encrypted vault bundles and authentication verifiers—also persist so a user can restore access after reinstalling. Vaultlix cannot decrypt those bundles.
How long things last
A vault and everything in it (messages, member names, subscriptions) is deleted immediately if either person uses "Close & erase." Otherwise, a temporary vault is automatically and permanently deleted after 24 hours of inactivity, measured from the last activity in that vault, not from when it was created. Simply closing your browser tab does not immediately delete a vault; the idle timer above is what eventually does. A permanent vault does not have an inactivity timer at all — it stays available indefinitely until someone uses "Close & erase" or revokes it from within the app, at which point it and everything in it are deleted the same way.
Disappearing-message timers, when enabled, delete an individual message from the server as soon as its timer expires, independent of the vault's own lifetime.
File attachments
Files are encrypted in your browser before upload, transmitted as encrypted data, and delivered directly to the recipient. Files are not stored on our servers beyond the same vault lifetime described above.
Voice and video calls
Call signaling is encrypted with the vault's end-to-end encryption key. WebRTC then encrypts audio and video between the participants' devices using DTLS-SRTP. To prevent either participant from learning the other's IP address, Vaultlix routes call traffic through Cloudflare's TURN service instead of using a direct peer-to-peer network path. Cloudflare relays the already-encrypted media packets and processes the connection metadata required to operate that relay, but it cannot decrypt the call audio or video. Vaultlix does not record or store call media.
Cookies and tracking
Vaultlix does not use cookies, analytics trackers, or advertising pixels, and does not use Google Analytics or an equivalent analytics service. Optional GIF search is provided by KLIPY as described below.
Third-party services
Vaultlix is hosted on Railway (railway.app). Railway may collect standard infrastructure logs including IP addresses. Please review Railway's privacy policy for details. We use Google Fonts for typography — fonts are loaded from Google's servers. Voice and video calls use Cloudflare's TURN service, which relays DTLS-SRTP-encrypted media packets and processes the connection metadata required to operate the relay but cannot decrypt call audio or video. Push notifications are delivered through Apple's and Google's respective push notification services, which see that a notification was sent to your device but not its content.
If you open the GIF picker, your device sends searches, language/region settings, and ordinary network information such as your IP address directly to KLIPY. When a GIF is displayed, the recipient's device loads it directly from KLIPY. The selected GIF reference is included inside the end-to-end encrypted Vaultlix message, but the GIF file itself is delivered by KLIPY and is not end-to-end encrypted by Vaultlix. Vaultlix does not send your private number to KLIPY or proxy, cache, or re-host KLIPY media.
Children's privacy
Vaultlix is not intended for use by anyone under the age of 18. We do not knowingly collect information from minors.
International users
Vaultlix is operated from India and this policy is governed by Indian law, as stated below. If you access Vaultlix from another country, you do so on the understanding that your data may be handled under Indian law; where the law of your own country grants you additional rights that cannot be waived, this policy does not limit those rights.
Legal requests and abuse reports
If we receive a valid legal request — a court order or a request from law enforcement made under applicable Indian law — we will review it and respond as required by law. What we can actually provide is limited by how Vaultlix is built: we can only disclose what exists in server memory at the moment the request is received (the encrypted content of an active vault, the display names in it, and whatever standard access logs Railway retains) — we cannot decrypt message content ourselves, and we cannot produce anything for a vault that has already been closed or has already expired, because nothing remains anywhere once that happens.
You can use Report and block in a vault's Safety settings, or contact legal@vaultlix.com, to report abuse, suspected illegal content, or a violation of our Terms of Service. An in-app report contains the selected reason, optional details, the report time, and one-way identifiers for the vault and reporter. Vaultlix cannot read encrypted conversations. Up to five recent decrypted text messages are included only when you expressly select that option; the confirmation explains that their plaintext will be shared with Vaultlix safety staff. Reports are access-restricted and automatically deleted after 90 days unless they must be retained longer to investigate an active safety matter or comply with law. We may act on a credible report by disabling or deleting the vault in question.
Changes to this policy
We may update this policy from time to time. Updates will be reflected on this page with a revised effective date.
Governing law
This policy is governed by the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.
Questions? Contact us at privacy@vaultlix.com
Vaultlix
Terms of Service
Effective date: July 2026 · vaultlix.com
By using Vaultlix, you agree to these terms. If you do not agree, please do not use the service.
What Vaultlix is
Vaultlix is an anonymous, encrypted messaging, voice, and video-calling service. It allows two people to communicate privately without accounts or stored data. Vaults are temporary: they are deleted immediately when either person uses "Close & erase," and otherwise expire automatically after a period of inactivity, as described in our Privacy Policy.
Acceptable use
You may use Vaultlix for any lawful purpose. You may not use Vaultlix to:
Transmit, distribute, or store any content that is illegal under applicable law
Harass, threaten, or harm any individual
Distribute child sexual abuse material (CSAM) or any content exploiting minors
Facilitate terrorism, violent extremism, or organised crime
Infringe on the intellectual property rights of others
Attempt to compromise the security or integrity of the service, except for good-faith security research conducted without harming users or disrupting the service, and reported to us responsibly at legal@vaultlix.com
No warranty
Vaultlix is provided "as is" without warranties of any kind. We do not guarantee that the service will be available, error-free, or suitable for your specific needs.
Limitation of liability
To the fullest extent permitted by law, Vaultlix and its operators shall not be liable for any direct, indirect, incidental, or consequential damages arising from your use of the service.
Privacy
Your use of Vaultlix is also governed by our Privacy Policy.
Termination
We reserve the right to terminate or restrict access to Vaultlix at any time, for any reason, without notice.
Abuse reports and legal process
To report suspected illegal activity, abuse, or a violation of the Acceptable use section above, contact legal@vaultlix.com. We may suspend, disable, or delete any vault without notice if we believe it violates these terms.
We will cooperate with valid legal process to the extent legally required. Because Vaultlix is deliberately built to retain as little as possible, what we're actually able to provide is limited to whatever exists in server memory at the time a request is received — see the Privacy Policy for exactly what that is, and what it no longer includes once a vault has closed or expired.
Governing law
These terms are governed by the laws of India. Any disputes shall be subject to the exclusive jurisdiction of courts in Chennai, Tamil Nadu.
Contact
For any questions regarding these terms, contact us at legal@vaultlix.com
vaultlix.com · Anonymous Private Messaging · Chennai, India
Vaultlix
Frequently Asked Questions
vaultlix.com
What is Vaultlix?
A private chat app for two people — no phone number or email required, nothing we can read. Your system-generated Vaultlix private number preserves encrypted vault access across devices.
Do I need an account or a phone number?
No. Vaultlix does not require a phone number, email or real name. It gives you a system-generated Private Number for sign-in, recovery and exact-number connections.
Is it actually anonymous?
Vaultlix uses a system-generated Private Number and an opaque encrypted vault bundle; no phone number, email or real name is collected. The Private Number is not a cellular number and cannot receive SMS or ordinary calls.
Is it end-to-end encrypted?
Yes. Messages are end-to-end encrypted with keys held by the participants. WebRTC call audio and video is encrypted between participant devices with DTLS-SRTP. Cloudflare TURN relays the encrypted packets to hide participants' IP addresses from each other, but cannot decrypt the call media. In guest mode private keys remain local. If encrypted sync is enabled, vault credentials are wrapped inside a separate client-encrypted account bundle before upload; Vaultlix cannot decrypt that bundle.
What happens when I close a vault?
It's deleted immediately, for both people, along with everything inside it. Not archived, not hidden — gone.
Temporary vs. permanent vault?
A temporary vault is for one conversation and expires within a day. A permanent vault never expires — reopen it anytime with the same code.
Can more than two people join?
No — Vaultlix is built for one-to-one conversations only.
vaultlix.com · Anonymous Private Messaging · Chennai, India
Vaultlix
Enter your independent Vaultlix passcode. The phone's passcode cannot unlock Vaultlix.
Settings
Profile
Private number, name, account and encrypted sync
Privacy & Security
App lock, blocking, account deletion and Emergency Exit
Notifications
Message sounds, alerts and device permission status
Chats
Conversation label, message controls and chat safety
Calls
Call privacy, permissions and audio routing guidance
Help
How to use Vaultlix, FAQ, policies and version
Language
Use your device language or choose another
App-wide
Vaultlix App Lock
Use an independent passcode and lock immediately in the background
Set up
Message chime
Play sound when a message arrives
Push notifications
Notify when messages arrive while away
Checking…
Vaultlix Private Number
Encrypted backup for your conversations and identity across devices
Set up
Call privacy and controls
Encrypted audio and video
Call media is encrypted between participant devices
Protected
Audio route
Choose phone, speaker, or an available Bluetooth device during a call
During call
Microphone and camera
Permissions are controlled by your phone’s system settings
Device
Language
The change applies immediately. Arabic uses a right-to-left layout.
Current conversation safety
Block participant
Stop contact through this conversation and erase its access from this device
Report and block
Report abuse, then immediately block this participant
Delete Account
Permanently delete your account, conversations, encrypted bundle, and every signed-in session
Current conversation—
Profile / Details
View this participant’s Vaultlix private number
Open
Label this conversation
A private label visible only to you and included in your encrypted account sync
Clear chat
Erase all messages for both participants while keeping the connection open
Make this a permanent vault?
You've come back to this vault a few times — turn it into one that never expires, same code, same history.
Permanent Vault
This is a permanent vault
—
Revoke & get new link
Current link stops working immediately for both of you
Open a conversation to manage its label, clear its messages, or use participant safety controls.
About
Vaultlix
FAQ and how to use Vaultlix
Private numbers, conversations, calls, deletion, and safety
Privacy Policy
How we handle your data
Terms of Service
Rules for using Vaultlix
Vaultlix · Version 1.0 Anonymous · Encrypted · Unreadable to us
Report and block
Vaultlix cannot read encrypted conversations. Your report sends the reason and a one-way vault identifier. Recent decrypted messages are included only if you explicitly choose to share them.
Emergency Exit
Choose carefully. Removing a conversation deletes its local encryption keys, making retained ciphertext unreadable. Device erasure and account deletion cannot be undone.
Your private identity
Create your Vaultlix private number
Choose the name people see. Vaultlix will generate a permanent private number people can use to find you—without your phone number or email.
—
Your private identity
Checking connection requests…
Save both your private number and recovery code. You need both to recover the account if you forget the password.
Vaultlix private number
Conversation
Profile / Details
Vaultlix private number
—
Visible only inside your connected conversation with this participant.
Vaultlix identity
—
—
New private connection
Enter their Private Number
Enter the exact 10-digit Vaultlix private number shared with you. Vaultlix does not search contacts or suggest people.