Private and secure by design.

You sign up with your phone number and a code sent by SMS. Zaprite doesn't keep your number: once it's verified, only a keyed hash of it is stored.

Your account is a key created on your phone, and the app signs every request with it. There's no password to steal, guess or reuse.

Your display name, username and photo are encrypted on your phone before they're saved, so our servers can't read them.

Nobody can find you by your phone number or username until you enable it—and only if they know either one.

Zaprite P2P is not a wallet. You connect the wallets you already use, and every payment goes straight from your wallet to the recipient's. Zaprite can never access your funds.

The credentials that let the app spend from a connected wallet are kept in your phone's secure storage (the iOS Keychain or Android Keystore). They never leave your phone, and are secured by biometrics. Every payment requires your approval with Face ID, fingerprint or passcode. Connect over Nostr Wallet Connect and your spending budget is enforced.

Receiving is separate. To let others pay you, the receiving details you choose, such as a Lightning address, are stored with Zaprite, and they can only be used to receive. If you decide to connect Receive only, you can still make payments by deeplinking out to the apps on your phone.

Check who you're paying, how much and what it's for, then ‘Slide to pay’. The app asks for Face ID, your fingerprint or your passcode every time, so nobody can pay from your wallets without you.

Requests and payment messages between Zaprite P2P users are end-to-end encrypted on your phone. Our servers pass them along without being able to read them, and they are deleted after delivery or expiration.

To process a payment, Zaprite records the amount, note and hashed user IDs. Your note is also included in the Lightning invoice your wallet sees.

Notifications never include amounts, names or notes, so nothing about your payment shows on your lock screen or is known by your phone OS.

When you sync your contacts, their phone numbers are hashed on your phone, so they're never sent in plain text. Names never leave your phone, and you choose who to add from the friends already on Zaprite P2P.

Every account has a 24-word recovery phrase, and showing it takes Face ID, your fingerprint or your passcode. You can also back up with a passkey: your account is encrypted with it, and we only store the encrypted copy.

Lost both your recovery phrase and passkey? Recover with your phone number.* It takes two SMS codes seven days apart, and we let you know, so you can stop it if it isn't you.

* Only your identity (account ID and username) is recoverable by phone number. Transaction Activity and Contacts cannot be recovered from SMS alone.