Frequently Asked Questions¶
Answers to common questions about Vauchi.
Privacy & Security¶
Is my data encrypted?¶
Yes, comprehensively:
- At rest: All data on your device is encrypted with AES-256-GCM using a key stored in your device's secure hardware (iOS Keychain / Android KeyStore)
- In transit: All communication uses end-to-end encryption (X25519 + XChaCha20-Poly1305)
- Backups: Protected with Argon2id key derivation and XChaCha20-Poly1305
Can the relay server read my contacts?¶
No. The relay server only sees encrypted message envelopes. It cannot:
- Decrypt any message content
- See your contact list
- Read your contact card fields
- Associate your identity with your data
The relay is essentially a "dumb pipe" that passes encrypted blobs between devices.
What data does the relay server store?¶
Only:
- Encrypted message envelopes (deleted after delivery or 7 days)
- Connection metadata for rate limiting (IP address, timestamps — deleted after 24 hours)
Is Vauchi truly private?¶
Yes. Vauchi is designed with privacy as the core principle:
- Local-first architecture (your data lives on your device)
- End-to-end encryption (we can't read your data even if we wanted to)
- No analytics or tracking
- No cloud accounts
- Open source (you can verify our claims)
Identity & Account¶
What happens if I lose my device?¶
You have several options:
- Another linked device: Continue using Vauchi normally
- Backup: Restore your identity from an encrypted backup
- Social recovery: Get vouchers from contacts who can verify your identity
- Start fresh: Create a new identity and re-exchange with contacts
How does social recovery work?¶
Social recovery uses your real-world relationships to verify your identity:
- You create a "recovery claim" on a new device
- You share this claim with trusted contacts
- Each contact creates a "voucher" confirming they recognize you
- After collecting enough vouchers (typically 3), your identity is restored
This prevents both:
- You being locked out (contacts can vouch for you)
- Someone else stealing your identity (they'd need to fool multiple contacts)
Can I change my display name?¶
Yes, go to Settings and edit your display name. The change syncs to all your devices and contacts see the update.
Do I need an account?¶
No. Your identity is created on your device. There's nothing to sign up for.
Contacts & Exchange¶
How do I exchange contacts?¶
- Meet the person in real life (or video call)
- Open the Exchange screen
- Show them your QR code to scan
- Scan their QR code
- Done! You're now contacts
Why do I need to meet in person?¶
In-person exchange ensures:
- You're connecting with who you think you are
- No man-in-the-middle can intercept the exchange
- The trust relationship is established in the real world
Can I exchange contacts remotely?¶
Yes, via video call — share your screen showing the QR code while the other person scans it, then switch. However, in-person is more secure because you can verify identity directly.
Can I remove a contact?¶
Yes:
- Go to Contacts
- Select the contact
- Tap Delete/Remove
- Confirm
This removes them from your device. They still have your data (whatever was visible to them), but won't receive future updates.
Multi-Device¶
Can I use Vauchi on multiple devices?¶
Yes! Vauchi supports multi-device sync:
- Set up Vauchi on your first device
- Go to Settings > Devices > Link New Device
- Follow the linking process on your second device
- Both devices now share the same identity
How many devices can I link?¶
Up to 5 devices can be linked to one identity.
How do I migrate to a new phone?¶
Method 1: Device Linking
- On old phone: Settings > Devices > Link New Device
- On new phone: Install Vauchi and join existing identity
- Once synced, you can uninstall from old phone
Method 2: Backup & Restore
- On old phone: Create an encrypted backup
- On new phone: Install Vauchi and restore from backup
Backup & Restore¶
How do backups work?¶
- You create a backup with a password you choose
- Vauchi encrypts all your data using that password
- You receive a backup code (Base64 encoded data)
- To restore: backup code + password = your identity
What's included in a backup?¶
- Your identity (cryptographic keys)
- Your contact card (all fields)
- All contacts and their cards
- Visibility settings
- Device information
I forgot my backup password. Can you recover it?¶
No. The encryption is designed so that only you can decrypt your backup. This is a security feature, not a bug. Without the password, the backup cannot be decrypted by anyone, including us.
Visibility & Sharing¶
How do I control what each contact sees?¶
- Open a contact's detail page
- Scroll to "What They Can See"
- Toggle individual fields on/off
Do contacts know when I hide fields?¶
They see fields disappear from your card, but don't receive a notification. It appears as if you removed the field.
Can I share different info with different contacts?¶
Yes! That's the core feature:
- Work contacts: Show work email, hide personal phone
- Family: Show everything
- Acquaintances: Show only basic info
Technical¶
What's the relay server for?¶
The relay server:
- Routes encrypted messages between your devices
- Enables real-time sync
- Stores messages temporarily if a device is offline
- Cannot read any message content
Think of it like a post office that handles sealed envelopes.
Does Vauchi work offline?¶
Partially:
- You can view all your data offline
- You can make changes offline
- Changes sync when you're back online
- You cannot exchange contacts offline (needs camera + network)
What encryption does Vauchi use?¶
- Signing: Ed25519
- Key Exchange: X25519 (Curve25519)
- Symmetric Encryption: XChaCha20-Poly1305
- Key Derivation: Argon2id (for passwords)
- Forward Secrecy: Double Ratchet protocol
All cryptography uses audited libraries (ring, chacha20poly1305, argon2).
Is Vauchi open source?¶
Yes! The complete source code is available at: https://gitlab.com/vauchi
You can:
- Inspect how your data is handled
- Verify our security claims
- Contribute improvements
- Run your own relay server
Troubleshooting¶
My contacts don't see my updates¶
- Check your internet connection
- Ensure sync is working (Settings > check last sync time)
- Verify the field is visible to that contact
- Ask them to manually refresh
The QR scanner doesn't work¶
- Check camera permissions
- Ensure adequate lighting
- Clean your camera lens
- Try adjusting distance to the QR code
- Restart the app
Sync seems stuck¶
- Check internet connectivity
- Try manual sync (pull to refresh or Settings > Sync)
- Check if the relay server is reachable
- Restart the app
Still Have Questions?¶
- GitLab Issues: https://gitlab.com/vauchi/vauchi/-/issues
- Email: support@vauchi.app