FREQUENTLY ASKED QUESTIONS
ZeroText FAQ
Everything you need to know about ZeroText's luxury & private architecture, encryption, and privacy model.
Getting Started
ZeroText is a luxury private messaging platform engineered by App is nothing, a subsidiary
of DRPCOA ENTERPRISE. It uses cryptographic 8-character PINs derived from BIP-39 seed phrases instead of
phone numbers. No registration, no surveillance, no data logging — mathematically enforced by architecture.
On first launch, ZeroText generates a 256-bit entropy BIP-39 seed phrase entirely on your
device. Your unique 8-character alphanumeric PIN is deterministically derived from this seed using Ed25519
key derivation. The seed phrase is the master key — back it up offline, in writing, immediately.
Share your ZeroText PIN directly by reading it aloud, displaying your in-app QR card for
scanning, or using NFC Touch Beam on compatible Android devices. You can also generate shareable invite
links through SMS, WhatsApp, Telegram, X, TikTok, Snapchat etc. No phone number is ever exchanged.
When you initiate a conversation, ZeroText performs an X3DH (Extended Triple
Diffie-Hellman) key agreement using both parties' identity keys and ephemeral keys. This establishes the
Double Ratchet session root key. Your first message is encrypted under AES-256-GCM and transmitted through
the zero-log relay. The relay verifies delivery and immediately discards the packet.
Privacy & Security
No. The ZeroText relay is architecturally incapable of logging messages. It operates
entirely in-memory with zero disk writes. When a recipient acknowledges delivery, the relay packet is
immediately purged using DoD 5220.22-M wiping patterns. There is nothing to subpoena, confiscate, or hack.
Absolutely not. All messages are encrypted client-side before leaving your device using
AES-256-GCM. ZeroText's relay handles only encrypted ciphertext. We do not possess, control, or have access
to any decryption keys — they exist only on your device and your recipient's device.
Zero. We do not collect IP addresses, device identifiers, message timestamps, conversation
graphs, user profiles, or usage analytics. The relay processes encrypted packets with no knowledge of
sender, recipient, content, or timing beyond the immediate in-memory transit window.
We cannot comply with data requests for content we do not possess. Our architecture makes
this a technical impossibility, not a policy choice. If served with a lawful order, App is nothing would be
legally compelled to disclose that it holds no user message data — which is the factual truth.
Relay Architecture & Local Storage
The ZeroText relay operates strictly inside volatile RAM on private bare-metal nodes. It
has zero databases and zero disk persistence (statistically and physically 0 disk writes). Clients connect
over TLS 1.3 WebSockets. When message delivery is acknowledged by the recipient, the server immediately
executes an active memory scrub routine, overwriting the RAM buffer with zeroes (0x00).
Your complete chat history is stored permanently on your physical device in a
hardware-encrypted AES-256 local vault (bound to your phone's Secure Enclave / Android Keystore). Both you
and your contacts can search, read, and access past conversations anytime offline. The relay only acts as a
temporary transmission pipe and never retains copies of your conversations.
If the recipient is offline, the encrypted ciphertext is held temporarily in volatile RAM
with a strict 24-hour Time-To-Live (TTL). When the recipient reconnects, the message is dispatched and the
memory is scrubbed. If the recipient remains offline past 24 hours, the expired packet is safely purged from
RAM, and your device automatically reconciles and resends the unacknowledged Double Ratchet sequence upon
your next mutual session.
The Double Ratchet Algorithm combines two ratchet mechanisms: a symmetric-key ratchet and a
Diffie-Hellman ratchet. Each message generates a new encryption key, ensuring that even if a single message
key is compromised, past and future messages remain secure — known as forward secrecy and future secrecy.
X25519 (Curve25519 Diffie-Hellman) is used for all key exchange operations in ZeroText —
including the initial X3DH handshake and each subsequent DH ratchet step. Curve25519 provides approximately
128-bit security with very fast computations, making it ideal for mobile devices.
AES-256-GCM is an authenticated encryption scheme that provides both confidentiality
(AES-256) and integrity/authenticity (GCM authentication tag). Any tampering with the ciphertext is detected
before decryption. It is NIST-approved, hardware-accelerated on modern ARM and x86 processors, and
battle-tested at scale.
ZeroText PIN System
Your seed phrase is the only recovery mechanism for your ZeroText identity. If lost, your
account and all associated keys are permanently unrecoverable. ZeroText cannot restore access — this is by
design. Back up your 12-word seed phrase offline immediately upon account creation.
Yes. You can restore your identity on any new Android device by entering your 12-word BIP-39
seed phrase. Your ZeroText PIN, identity keys, and cryptographic profile are fully reconstructed locally.
Multi-device session sync is on the development roadmap.
Groups & Circles
A Closed Circle is ZeroText's encrypted group system. Circles support tiered membership of up
to 1,000 members with configurable role tiers. All group content — messages, task checklists, and media vault
items — is encrypted client-side using a group sender-key distribution model.
ZeroText groups use a sender-key distribution model similar to the Signal Group Protocol.
Each member distributes a chain key to all other members. Group messages are encrypted per-recipient, so no
single packet decryptable by non-members ever touches the relay.
ZeroText AI
ZeroText AI is a native private AI assistant embedded in the app. It is architecturally
zero-knowledge: no queries are stored, no user profiles are built, and no AI interaction history is retained
on any server. ZeroText AI uses an encrypted, zero-log inference relay consistent with our overall
architecture.
ZeroText AI assists with message drafting and editing, translation, summarisation, private
web-based research, scheduling assistance, and general intelligence queries — all without your queries or
context ever being permanently stored or associated with your identity.
ZeroText Business & Business Prime
ZeroText Business is our 100% free community tier providing in-chat POS
billing, 15-minute stock locks, zero-fee ZeroText Wallet payments, BBM D/R delivery status glyphs, and a
5-member team roster. ZeroText Business Prime ($99/mo or Lifetime Enclave Node) adds 24/7
Tri-Engine AI Auto-Pilot with persistent human takeover, custom SSR domain storefronts (e.g.
brand.com) with HTTP/3 & AEO Schema.org optimization, BYOK payment gateway enclaves (Stripe,
Paystack, Remitano USDT), unlimited team seats, carrier webhooks (DHL, FedEx, UPS), and automated deposit slip
OCR verification.When an in-chat bill or catalog link is dispatched to a customer, ZeroText atomically
reserves the items using an isolated countdown lock. If the customer completes payment within 15 minutes,
inventory is permanently decremented and a carrier label is queued. If the timer expires without payment, the
stock lock releases automatically back to the general inventory pool, preventing overselling.
In commercial chat streams, ZeroText displays iconic high-contrast status indicators:
[D] indicates the structured commerce payload (bill, catalog item, or dispatch note) has been
safely delivered to the customer's cryptographic enclave, and [R] indicates the customer has
opened and viewed the bill or message.
Under Business Prime, merchants can connect their own Stripe, Paystack, Remitano Crypto, or
Flutterwave API keys. All keys are encrypted client-side using hardware-backed AES-256-GCM authenticated
encryption before transmission. Payment webhook callbacks are verified via HMAC-SHA256 signatures, ensuring
zero third-party leakage.
The Tri-Engine Auto-Pilot continuously combines your merchant brand voice, specific business
policies (return window, warranty, VAT rules), and autonomous LLM reasoning to handle customer inquiries,
recommend products, compile carts, and request payment. A merchant or staff member can tap [Take
Over] at any second: the AI immediately pauses and relinquishes total control to the human
concierge.
B-Chat is the premier commercial communication hub in ZeroText Business. Positioned as the
default landing screen, B-Chat connects merchants directly with consumers and other businesses. Merchants can
instantly generate formal in-chat POS bills, accept multi-currency settlement (USD, NGN, USDT, EUR), trigger
stock countdown reservations, and use instant slash commands (e.g.
/catalog,
/invoice, /policy) for lightning-fast customer service.The Customer Broadcast Engine allows merchants to broadcast rich promotional announcements,
new product arrivals, flash discounts, and store updates directly to verified customer inboxes without
creating spammy public group chats. Customers receive encrypted 1-on-1 notifications with interactive product
buttons and instant checkout options.
Accessible via the dedicated Market (B2B) tab, the B2B Directory connects verified wholesale
suppliers, manufacturers, distributors, and logistics partners. Businesses can explore partner catalogs,
request bulk quotations, negotiate terms in encrypted B2B chat threads, and execute wholesale purchases with
zero intermediary transaction fees.
When setting up Google Authenticator TOTP two-step verification, ZeroText generates a unique
16-character Emergency Disaster Recovery Code (e.g.
ZT-A1B2-C3D4-E5F6). If you ever lose access
to your phone or authenticator app, you can enter your 12-word master recovery seed plus this Disaster
Recovery Code to instantly bypass TOTP and decrypt your business cloud vault.Never. In accordance with our zero-knowledge sovereignty mandate, ZeroText
Cloud securely synchronizes catalogs, products, orders, inventory, and business configuration, but
strictly excludes B-Chat and consumer chat histories. All conversations remain 100%
end-to-end encrypted on local device hardware and are never uploaded to any remote server.
Both apps feature high-luxury onboarding gateways with animated rotating rainbow
sweep-gradient crests. ZeroText Consumer allows instant 1-tap generation of ZeroText BIP-39
12-word seeds (no phone number required) or seamless 12-word account restoration. ZeroText
Business offers a 3-way gateway: (1) New Business Onboarding wizard with corporate KYC, custom
domain slug claim, and wallet setup; (2) Existing Business Dual-OTP owner login (phone + email OTP + 2FA
recovery); and (3) ZeroText Business Official Staff Portal requiring a Business Identification Code (e.g.
ZTBIZ-7A9F) and phone verification.Need More Detail?
Browse the full Knowledgebase for in-depth technical articles, setup guides, and cryptographic specifications.