Now live · Private by default

Messages that
stay yours.

Real-time conversations with no passwords, no ads, and no data sold — ever. Built by e2ee with privacy engineered in from the start.

Continue with Google Explore features ↓
ECHO chat screen — conversation with COS CAST
0 Passwords needed
0 Ads ever
15 Max group size
1000 Chars per message
∞ Privacy, always
Core Features

Everything you need.
Nothing you don't.

Clean, focused messaging without the bloat. Every feature earns its place by making your conversations better.

💬
Direct Messages

One-to-one private chats with instant delivery and live typing indicators.

👥
Group Chats

Create named groups of up to 15 people. Search and add by @username.

🟢
Live Presence

See who's online in real time. Status clears automatically on exit.

⌨️
Typing Indicators

"@alice is typing…" shown live. Auto-clears after 5 seconds of inactivity.

🔴
Unread Badges

New message dots on every conversation you haven't opened yet.

🌓
Light & Dark Mode

Switch themes any time. Your preference is remembered across sessions.

📱
Installable PWA

Add to home screen on any device. Works like a native app, offline shell included.

🔍
@Username Search

Find anyone by username or display name. Opt out of search in one tap.

App Screens

Designed for clarity.

Clean interfaces in both light and dark. ECHO adapts to how you work.

ECHO sign-in screen

No password required — sign in with Google in one tap.

ECHO dark mode empty state

Clean dark mode — start a DM or group from scratch.

ECHO light mode live chat

Light mode with live presence, typing indicators, and real-time delivery.

Trust & Security

Privacy isn't a feature.
It's the foundation.

Every security decision was made at the architecture level — not bolted on as an afterthought.

🔒
Server-enforced rules
Firestore Security Rules can't be bypassed — not even via direct API calls.
🚫
Zero third-party trackers
No analytics SDK, no advertising pixels, no third-party scripts.
✍️
Immutable message log
Messages cannot be silently edited or deleted — rules-level enforcement only.
🔑
No passwords
Sign in with Google. No credentials to steal, reset, or forget.
Auth
🛡
Server-enforced access control
Only conversation members can read or write messages — no client-side bypass possible.
Rules
✏️
Immutable messages
Messages cannot be edited or deleted by anyone — enforced at the rules layer.
Integrity
📎
No file attachments
Attachment fields are blocked server-side. No malicious files can be shared.
Safety
👁
Search visibility control
Hide yourself from search entirely. Your username, your choice.
Privacy
📏
Validated end-to-end
1–1000 character limit validated in UI and at the Firestore rules layer simultaneously.
Validation
Built on
Modern, lean, reliable infrastructure.
Firebase Auth Cloud Firestore Vanilla JS (ES modules) PWA / Service Worker Cloudflare Pages Syne typeface
✦ Free to use

Start a conversation
you can trust.

No sign-up friction, no hidden data collection. Just private, real-time messaging that works — on any device.

Open ECHO Learn more