Buzzio protocol / architecture one-pager

For reviewers · sealed path + Privacy vs Features · not a marketing brochure

Version 2026-08 · Official PDF pack
doc.buzzio.dev
Open-source crypto

Buzzio is a privacy messenger with two lanes: Privacy / sealed (1:1, E2E groups, Whisper private chat, private calls) and Feature / shared (open-history groups, Communities, Broadcast). Phone-free identity (Buzzio ID + mnemonic). Data is not sold.

1. Sealed delivery path

Sealed path: sender encrypts, sealed envelope, blind relay, recipient decrypts — Outer envelope conceals plaintext sender on the preferred path. Content keys stay on devices. Cloud Functions may learn the sender when verifying certificates for abuse controls — not Tor-grade anonymity.

2. Privacy section vs Feature mode

Privacy section sealed vs Feature mode shared matrix

Feature	Mode	Operator-readable content?	History posture
1-to-1 chat	Sealed	No	Delete-on-delivery · local SQLCipher
E2E groups	Sealed	No	Sender-key E2EE · short catch-up
Whisper private chat	Sealed	No	Session E2E · expires
Private calls	Sealed	No recordings	Encrypted signaling · P2P when possible
Open-history groups / Communities / Broadcast	Shared	Yes for text (server-held DEKs)	Durable backscroll · roles / discovery

3. Claim vs non-claim (short)

Claim: Signal-class sealed content secrecy + sealed-envelope minimization + phone-free ID + honest shared labels.
Do not claim: Tor anonymity · absolute zero metadata · Feature mode is sealed · published third-party audit (none yet).

4. How to verify

Clone buzzio-crypto-open-source, run dart pub get · dart test · dart run example/demo.dart. Full checklist: How to verify. Report bugs via forum.buzzio.dev · Security disclosure.