A messenger your conversations can never be pulled out of.
Chemmy is built so that conversations cannot be read on the server or on a seized device. You can check that yourself, right here on this page — not take our word for it.
Don't take claims on trust — check them. Type anything: it is encrypted right in your browser by the same code that runs in the Chemmy app. You will see what the server would receive, and how the recipient opens the message with their own key. Nothing is sent anywhere.
encryption runs in your browser
① Your text
This message's key:в памяти вызова
② What the server receives783 B
(demo — regenerates on page load)
🖥 Server: receives only thisv2
③ What the recipient sees
Патент подаём во вторник. Конкурентам знать рано.
👤 Recipient: opened it with their own keysender confirmed✓
Recipient key:(demo — regenerates on page load)
🔥 Every message is encrypted with its own one-time key. That key is not stored anywhere — not on this page, not on the server.
What the server sees — and what it doesn't
We will not pretend the server knows nothing about you. It delivers your messages, so it needs some routing information. Here is the honest line:
Сервер не видит
текст сообщений
содержимое фотографий, видео и файлов
имена и размеры отправленных файлов
ваш пароль и ваш личный ключ
содержание звонков
Сервер видит
кто с кем переписывается и в каких чатах состоит
время отправки и объём сообщений
имена пользователей и аватары
названия групп
тип вложения — фото, видео или файл
устройства: платформа, версия приложения, последняя активность
What you can check right hereAnd where this check stops
Checkable. Your message is encrypted in your browser before anything could reach a server. What you see in the middle column is not a picture: it is exactly the format the Chemmy app uses, and it opens again with the recipient's key. Your text never appears inside the encrypted message — automated tests verify that on every build of this site.
What this check does not show. That the server knows nothing about you — it sees the routing data listed above. That a web page cannot be tampered with: any web page is served by a server, so for the most sensitive work the Android or Windows app is the safer choice. And that someone external has reviewed us: we have no independent audit yet, and this page is not a substitute for one.
How well the past is protected. Every message is encrypted with its own key, so one leak does not expose a whole conversation. But anyone who obtains a recipient's long-term key can read that recipient's previously stored messages. For chats where that matters there is «Maximum» mode: keys advance as the conversation continues, so a single compromise does not unlock the whole history. We say this plainly because the mode is switched on deliberately, not by default.
Технические детали проверкиДля тех, кто хочет алгоритмы и формат
Обмен ключами — ECDH на кривой P-256, содержимое — AES-256-GCM, разделение контекстов — HKDF. Для каждого сообщения создаётся отдельный ключ содержимого; он заворачивается получателю через эфемерную пару отправителя, которая тут же отбрасывается, и подписывается ключом отправителя с привязкой к чату и автору. Это формат v2 — путь по умолчанию, когда для чата не включён Double Ratchet и не установлен пул одноразовых ключей. Страница использует тот же модуль шифрования, что и приложение (копия client/src/crypto.js), и автотест падает, если копия разойдётся с оригиналом.
The server delivers your messages but cannot read them
The server is just a blind relay. It never sees plaintext, files, your password or private key. Even full server access grants no access to conversations.
🔐
E2EE by default
ECDH P-256 + AES-256-GCM. Every message uses a fresh content key wrapped for the recipient.
🧠
Key in memory only
The key lives only in the app's memory and is never written to disk. After a restart you are back at the login screen.
🕵️
Server sees no content
The server receives only encrypted messages. No text, no files, no password.
✅
Verify contact by QR
Compare the code with your contact in person or over video — that is how you confirm you are talking to them.
🔑
Key protection at rest
Your password is protected by heavy key stretching, so guessing it from a stolen database is extremely costly.
🔒
Invite-only network
Registration by invite, no phone number. For a company — a separate deployment.
🖋
Message authenticity
Every message is signed, so neither the server nor a group member can pass someone else's message off as yours.
03
Protecting past messages
Every message is encrypted with its own key, and in «Maximum» mode the keys also advance as the conversation continues. The point is simple: one leak should not become access to the entire archive.
key
⏩
Past stays protected
Every message has its own key, so a single leak does not expose an entire conversation.
key
🔁
Double Ratchet
Keys advance as the conversation continues, so access to one key does not unlock the whole history. «Maximum» mode, enabled per chat.
key
🎟
One-time key pool
One key, one message; it is deleted after sending. For direct chats and groups.
🔥
Keys are destroyed
A used key is deleted right after sending, so it cannot be reused.
04
One-time key pool + an invitation only the recipient can open
For the most sensitive conversations — exchange a key pool via a text invitation you can pass over ANY text channel (messenger, paper, read aloud). The invitation is encrypted to the specific recipient's key — only they can open it. Keys never touch the server.
🔒 An invitation only the recipient can open
That invitation code can travel over any text channel — Telegram, paper, read aloud. It is sealed to the specific recipient's key. Intercepted along the way? Only useless ciphertext — impossible to open.
🔑
Invitationsealed to the recipient's key
→
📨
Any channelTelegram · paper · read aloud
→
🕵️
Interceptor🔒 can't open — garbage
✅
Recipient✅ opens with their key
Head of R&D🔑
🔑 Secure key pool
Statusactive · 1000
Create invitationCreate
Delivery channelany
invitation → any channel
Head of R&D🔒
Is the rig ready?
14:02 🔑
Yes, docs under the key pool
14:03 🔑
Every message — its own key
14:03 🔑
🔑 = one-time key per message
🔒 Max⚙
Double Ratchet
Keys advance automatically; nothing to configure.
Auto-ratchetOn
Self-healing✓
«Maximum» mode
05
Protection when the device is seized
A device can be lost, taken, or accessed by someone else. Chemmy is designed so that it does not give up your conversations at that moment.
key
👤
Alternate Private Workspace
A separate backup password opens a believable alternate workspace with different keys, contacts and conversations. The primary workspace remains inaccessible.
💥
Panic wipe
One action wipes the app's data and the account beyond recovery.
🔏
Auto-lock
The app locks on idle and when backgrounded, and asks for the password again. Keys are never stored on disk.
📵
Screenshot block
On Android, screenshots and screen recording are blocked, and the app preview is hidden in the recents list.
key
📋
Clipboard auto-wipe
A copied code disappears from the clipboard after 30 seconds and when the app locks.
🚫
No backup
Android's automatic backups are disabled, so your data does not leak to the cloud or to a computer.
06
Who needs this
🏭
Corporate espionage
A competitor or insider hunts for know-how, formulas, blueprints.
✅
Chemmy: Even seizing the device grants no access to the conversation.
Chemmy: Technical secrets won't leak from the server or the device.
🤝
Deals & M&A
Confidential talks, figures, terms before the announcement.
✅
Chemmy: Every message has its own key, so a later leak does not expose the whole negotiation.
⚖️
Legal & consulting
Attorney-client privilege, sensitive clients.
✅
Chemmy: The server cannot see content, and under pressure a separate workspace can be opened instead.
💰
Finance
Insider info, positions, strategy before disclosure.
✅
Chemmy: Minimal metadata, calls without IP leaks, clipboard self-wipes.
👔
Executives
Strategy, HR, crisis communications.
✅
Chemmy: Emergency wipe and a separate workspace in case the device is taken.
07
Chemmy vs the rest
An honest comparison of what actually protects a conversation.
Chemmy
Signal
Telegram
WhatsApp
E2EE by default
✓
✓
~
✓
A key for every message
✓
✓
~
✓
Double Ratchet / self-healing
~
✓
✕
✓
Keys ONLY in memory (seizure = nothing)
✓
✕
✕
✕
One-time key pool bypassing server
✓
✕
✕
✕
Second password, separate workspace
✓
✕
✕
✕
Panic wipe
✓
~
~
✕
Clipboard auto-wipe
✓
✕
✕
✕
No phone number
✓
✕
✕
✕
A separate server per company
✓
✕
✕
✕
✓ — on by default · ~ — turns on automatically once both sides support it · ✕ — absent
08
Calls — audio, video, group. Encrypted too.
Full voice and video, 1:1 and group. The media stream is end-to-end encrypted — the server relays ciphertext only. And in 1:1 calls your real IP is never revealed to the other party.
CFO
🔒 E2EE · 04:12
RELAY-ONLY · IP HIDDEN
🎤
📞
📹
1:1 call · real IP hidden
📞
Calls without IP leaks
1:1 audio/video go only through a relay — the other party sees the server's address, not yours.
👥
E2EE group calls
The server relays only the encrypted stream and holds no key to the call.
📡
Across any network
Calls connect even on difficult networks, and the call key changes when a participant leaves.
09
And it's a full modern messenger
Security without sacrificing convenience. Everything you expect from Telegram or WhatsApp is in Chemmy — running on top of end-to-end encryption.
💬
Direct & group chats
Plus broadcast channels for teams.
🎙
Voice messages
With waveform visualization.
🖼
Photos, video, files
Any attachments — as encrypted blobs.
😀
Reactions & emoji
16 reactions, see who reacted.
↩️
Replies & forwarding
Swipe reply, multi-forward.
✏️
Edit & delete
Edit or delete for everyone.
📌
Pinned
Pins and ⭐ saved.
🗂
Folders, archive, mute
Chat organization, synced across devices.
🔎
Search messages
Over decrypted content — locally on device.
🎖
Statuses & presence
«Online / busy» — visible to peers.
⏳
Disappearing messages
Timer for auto-deletion.
⏰
Scheduled send
Schedule a message for later.
⚡
Quick replies & polls
Canned phrases in one tap, votes.
📶
Offline queue
Write offline — sends when back online.
📍
Location (E2EE)
A point or live sharing, no third-party maps.
🌗
Dark/light theme, 3 languages
Russian, English, Ukrainian.
📤
Export chat
Locally, decrypted .txt.
🌐
Web, Android and Windows
Browser, mobile and desktop apps.
Start protecting your conversations today
Web, Android and Windows. For a company — a separate Chemmy deployment that we set up and run for you.
Chemmy encrypts message content end-to-end. Like any messenger, the server handles the routing data needed for delivery — it is listed above in the verification section. «Maximum» mode with advancing keys is enabled separately per chat. Algorithms: ECDH P-256, AES-256-GCM, HKDF/HMAC-SHA256, PBKDF2, Double Ratchet.
Not a seat in a shared messenger — your own Chemmy for your company. It is a digital service: access is provided online once payment is confirmed and your deployment is prepared.
A separate server for your company
You get a private Chemmy deployment: its own server, its own database, its own file storage and its own list of employees. Your data does not sit in a shared environment with other companies and is never mixed with anyone else’s.
1 license = 1 deployment
One license covers one company or project, with the active-user limit of your plan. A separate, unrelated project means a separate license and a separate deployment — that is not just a contract term, it is a real technical boundary.
Plans by user count
Starter — up to 25 active users (50 GB storage included), Team — up to 100 (250 GB), Business — up to 500 (1 TB), Enterprise — by individual request.
Format and term
A monthly or yearly license. Infrastructure, updates and server maintenance are on us — you do not need your own server or a sysadmin.
What's included
Every Chemmy capability described above on this page, for the stated number of active users and the included storage, for the whole license term.
Chemmy is part of Chemburbyzer
Chemmy is Chemburbyzer's flagship messenger. What you buy and use today is Chemmy — the secure messenger described on this page, and nothing more. Additional Chemburbyzer products (for example, secure traffic routing or a built-in wallet) are future ideas, not yet built and not included in this license — we don't sell or promise them today.
†
Pricing — Private/Dedicated deployment
All prices are in USD. Card and crypto checkout both charge the exact USD amount shown on the plan. Each plan is a separate Chemmy deployment for your company, not a shared spot in a multi-company service.
≈ 2 months free when paid yearly
Starter
up to 25 users
$147 / mo
Up to 25 active users
50 GB file storage included
Your own Chemmy deployment (not shared)
E2EE, 1:1 calls, groups/channels
Android · Windows · Web
Popular
Team
up to 100 users
$297 / mo
Up to 100 active users
250 GB file storage included
Everything in Starter
Priority email support
Business
up to 500 users
$597 / mo
Up to 500 active users
1 TB file storage included
Everything in Team
ENTERPRISE — 500+ users, custom storage, or specific infrastructure needs
Custom terms, including regional infrastructure where needed. No automatic card checkout — arranged directly.
Chemmy's base infrastructure is hosted in the EU and is included in all plans above. Additional infrastructure for specific countries or regions can be arranged separately, where technically and legally feasible. Contact sales to discuss scope and pricing for your case.
Invite users with your own link and earn a commission on their subscriptions. Partner registration is a separate flow with no invite code required — partner status activates immediately. Your partner cabinet, with your referral link and commission history, opens right after you sign in.
Three steps from payment to a working messenger inside your company.
Payment
Pick a plan and pay by card through WayForPay or in crypto through Plisio. Once the provider confirms it, your order is marked Paid.
We prepare your deployment
We set up a separate server for your company and configure it to your requirements. It is not a one-second automatic hand-off: we check everything before handing it over, and keep you posted via the contact on your order.
Access and onboarding
You get the address of your Chemmy and admin access. Employees install the regular Chemmy app (Web, Android or Windows) and connect to your deployment — no company-specific build required.
†
Everything about the license and deployment
Detail for anyone who wants to understand it before buying. Expand what you need.
What exactly am I buying?A license for a private Chemmy deployment for your company
You are buying the right to use Chemmy on a separate deployment raised specifically for your company: its own server, its own database, its own file storage and its own list of employees. It is a digital service, not boxed software: no server software is handed over to you and no server of your own is needed — we run the infrastructure.
The license includes every Chemmy capability described above on this page, within your chosen plan: the number of active users and the included storage.
How does deployment work?Set up after payment — not an instant automatic hand-off
Once payment is confirmed we set up a separate Chemmy instance for your company and configure admin access. We check it before handing it over, so it is not an instant automatic hand-off — we contact you using the details from your order and tell you when it is ready.
Onboarding is then yours to run: the admin invites people, they install the regular Chemmy app and sign in to your deployment. No separate per-company app build is required.
How does payment work?Card via WayForPay or crypto via Plisio, in US dollars
By card — through WayForPay: the payment page opens on the provider's side, so card details never pass through our servers and are never stored by us. In crypto — through Plisio's hosted page: the amount and payment status are confirmed by the provider itself.
All amounts are in US dollars, and both methods charge exactly the amount shown on the plan. There is no automatic renewal today: before your paid period ends we contact you and issue the next invoice.
Where is the infrastructure hosted?Base infrastructure in the EU; other regions on request
Chemmy base infrastructure is hosted in the European Union and is included in every plan on this page. Your deployment runs on servers we operate — you do not need to rent, configure or maintain anything.
If your company needs a different hosting region, that is possible where technically and legally feasible and is arranged separately with sales — ask us about terms and pricing for your case.
What's included in the license, and what isn't?Messenger, infrastructure and updates — yes; other products — no
Included: a private Chemmy deployment, every messenger capability on this page, the storage volume and active-user count of your plan, infrastructure maintenance and app updates for the license term, and support through the listed contacts.
Not included: handing the server software over to you, system-level access to the server, and products that do not exist yet. Ideas such as secure traffic routing or a Chemburbyzer wallet are not built, not sold, and not part of this license.
†
Frequently asked questions
What companies ask us most often before buying.
What does a company actually get after purchase?
Your own Chemmy instance: the address of your messenger, admin access, and the ability to onboard employees within your plan. The server, updates and maintenance are handled by us.
Is this a shared cloud service or a separate server for us?
Separate. You do not share an account, a server or data with other companies — your license gets its own Chemmy deployment.
Do we get our own database and file storage?
Yes. Your deployment has its own database, its own file storage and its own user list — none of it overlaps with other customers.
Where is our data physically stored?
The base infrastructure is hosted in the European Union and is included in every plan on this page.
Can the deployment be hosted in another region?
Yes, where technically and legally possible. Region is arranged separately with sales — contact us and we will confirm timing and pricing for your case.
How many employees can we connect?
Per plan: Starter — up to 25 active users, Team — up to 100, Business — up to 500. Above 500 is the Enterprise plan, arranged individually.
What if the included storage runs out?
Contact us and we will expand the volume or move you to a larger plan. We do not auto-charge for overage and we do not quietly delete your files.
Can we move to a larger plan later?
Yes. Write to us and we will recalculate the terms and raise the user and storage limits on your existing deployment — no migration or starting over.
Can one license cover several companies or projects?
No. One license means one deployment for one company or project. A separate, unrelated project needs its own license — that is both a contract term and a technical boundary between the data.
How do employees connect to our Chemmy?
The admin invites employees, they install the regular Chemmy app and sign in to your deployment. No per-company app build is needed.
Which apps are available?
The web version in a browser, an Android app (APK), and a Windows app — installer and portable. Links to every current build are in the Downloads section above. There is no iOS app today, and we do not promise one.
How do updates work?
We release updates centrally and apply them to your deployment. The app tells the user when a new version is available. Updates during the license term are included.
Do we need our own server or a sysadmin?
No. The server, its setup, updates and maintenance are on us. All you need is someone to administer users inside the messenger.
Can you read our messages?
No. Messages are end-to-end encrypted: the server stores and relays only encrypted data and cannot read the contents. See the security sections above on this page for detail.
How does payment work, and do you see our card details?
By card through WayForPay, in crypto through Plisio. Payment happens on the provider side: card details never pass through our servers and are never stored by us.
When does access open after payment?
Not instantly: once the payment is confirmed we prepare your deployment by hand. We contact you using the details from your order and tell you when it is ready.
How is the license renewed?
There is no automatic renewal today. Before the paid period ends we contact you and issue an invoice for the next period. There is no separate "cancel subscription" step — if the invoice is not paid, the license simply is not renewed.
Can we get a refund?
If payment went through but the deployment has not been set up yet, you can request a full refund within 14 days of payment. Once the license is set up and handed over, funds for an elapsed period are not refunded; well-founded cases are reviewed individually. Full terms are in the Refund & Cancellation Policy linked at the bottom of this page.
What happens to our data if we end the license?
We agree the wind-down in writing with you before the term ends — export and deletion included — so the terms are fixed for your specific situation. Contact us and we will arrange it in advance.
How do we reach support?
Email support@clients.help, Telegram @clients_help, phone +38 (096) 326-33-52. The same contacts are in the page footer and on the order form.
