CarrierPony: PGP Chat & Files

Kevin Stewart · Social Networking

Free

Independent analytics for this App Store listing. AppTracker is not affiliated with Kevin Stewart.

Chart standing · US

Not currently charting in this storefront.

What changed · US

Listing changes AppTracker has observed for this app in this storefront — new versions, price moves, rating shifts, and store copy.

Oct 6, 2026
New version 2.0 → 3.1.0

Pairing fixes. If you shared an invite and your app was closed when the other person accepted it, the pairing could fail to finish on your side, and their messages would never open. Neither of you saw an error. That's fixed: - An invite accepted while your app was closed now finishes the next time you open it, for up to 30 days. - Accepting an invite also tells the other person's phone directly, so it can finish the pairing even if the relay no longer has a record of it. - If messages are waiting on someone whose pairing hasn't finished on this phone, the inbox now says so. They open on their own once it does. - After you accept someone's invite, the conversation shows that their side hasn't finished pairing yet, until it does. These fixes work best when both phones are on 3.1.

Sep 18, 2026
New version 1.1 → 2.0
Aug 26, 2026
New version 1.0 → 1.1

In-app purchases · US

No in-app purchases.

Screenshots

About

CarrierPony is an encrypted messenger and file transfer app for people who'd rather the middle know nothing. Send messages and send real files, both sealed the same way. Everything is encrypted on your device and signed by your key, so only the people you paired with can open it, and they can be sure it really came from you. There's no account, no email, and no phone number. Your identity is a key that's generated on your iPhone and never leaves it. MESSAGES AND FILES, SEALED Chat privately and move files up to 50 MB in the same conversation, protected with OpenPGP using modern Ed25519 and Curve25519 keys. A dedicated Files tab keeps every transfer in one place, so sending a document is as simple as sending a message. GROUPS AND CHANNELS Start an encrypted group and share text and files with everyone in it, sealed the same way as a one-to-one chat. Or run a broadcast channel where you and your co-admins post and everyone else reads, and share a link that lets anyone subscribe. Subscribers never see each other. THE RELAY KNOWS NOTHING So your messages and files arrive even when your phone is off, they pass through a relay. That relay only ever forwards sealed envelopes. No names, no message contents, no files it can open, no plaintext. With sealed sender it does not even learn who is in a conversation, a group, or a channel. It holds an encrypted blob just long enough to deliver it, then lets it go. SKIP THE RELAY WHEN YOU WANT Turn on direct delivery and messages can travel straight between devices over your local network, or peer to peer across the internet, skipping the relay when a path exists. It stays off by default, and the relay stays the reliable fallback. SEPARATE IDENTITIES Keep more than one identity on the same device, say one for work and one for personal, each with its own key, contacts, and threads. PAIR, THEN VERIFY Connect by swapping an invite in person or over any channel you trust. Compare a safety number to be certain no one slipped into the middle. Give any contact a private name only you see. YOURS TO KEEP Keys are generated on your device and never leave it. Lock the app behind Face ID. Export an encrypted backup only you can open. Already have an OpenPGP key from GnuPG or another tool? Import it and keep your identity. OPEN AT THE CORE The cryptography is built on NorseHorsePGPCore, published as open source under Apache-2.0. The relay is open source too, so you can run your own and point the app at it. The important part isn't a secret. FREE No ads. No trackers. Nothing about you is collected or sold. CarrierPony is made by NorseHorse, an independent developer.

What's new · 3.1.0

Pairing fixes. If you shared an invite and your app was closed when the other person accepted it, the pairing could fail to finish on your side, and their messages would never open. Neither of you saw an error. That's fixed: - An invite accepted while your app was closed now finishes the next time you open it, for up to 30 days. - Accepting an invite also tells the other person's phone directly, so it can finish the pairing even if the relay no longer has a record of it. - If messages are waiting on someone whose pairing hasn't finished on this phone, the inbox now says so. They open on their own once it does. - After you accept someone's invite, the conversation shows that their side hasn't finished pairing yet, until it does. These fixes work best when both phones are on 3.1.

Details

DeveloperKevin Stewart
ReleasedJul 2026
UpdatedJul 2026
Version3.1.0
Size2.5 MB
RequiresiOS 18.6 or later
Age rating4+
LanguagesChinese, English, French, German, Italian, Japanese, Portuguese, Russian, Spanish
PriceFree
Categories Social NetworkingUtilities
Bundle IDcom.carrierpony.app