mentos.
A MORE PERSONAL SOCIAL NETWORK

Your people.
Your space.
Actually yours.

All the ways you connect. In your hands.
Chats, stories, and communities that live on your device, with no central server in between.

Android arm64 · Available on GitHub
Your identity.
No email needed.
Mentos Spaces, captured from the Flutter app in light mode Mentos Spaces, captured from the Flutter app in dark mode

Actual app UI · demonstration data

Lives on your device.
Stays in your control.
ILLUSTRATIVE PREVIEW · SAMPLE DATA · TRY ALL FIVE TABS ↑
Peer-to-peer by designNo email. No phone number.Your data lives with youBuilt in the open

FAMILIAR FEELING. DIFFERENT FOUNDATION.

A whole social life.
A little closer to you.

The everyday things you love, brought together.
Built around people and the connections
between them.

P2P CHATS & CALLS

Peer-to-peer conversations.

Connect by QR code or contact link. Send direct messages, start groups, share files, and make voice or video calls. Delivery and read receipts tell you when a message arrives.

FEED & STORIES

The everyday, worth sharing.

Post a thought. Share a story. Keep up with the people you follow, from one device to another.

SPACES & CHANNELS

Find your corner of the world.

Bring people together in spaces, channels, and forums built around the things you care about.

FILES & SHARING

Good things travel together.

Send files to your people and manage your transfers. Let others keep a copy when you choose.

A DIFFERENT KIND OF CONNECTION

Your social life,
held in your hand.

Your identity is a key on your device. Your posts and messages start there, too. Mentos connects you directly when it can; relays help when it can’t.

You decide what stays. Someone else can keep a copy only when you allow it and they accept.

Know how sharing works. A source needs to be online for content to travel, unless someone has been allowed to keep a copy.

Get to know the project

THE CONNECTION UNDERNEATH

Phone to phone.
Powered by iroh.

Mentos uses iroh to connect devices over encrypted QUIC connections. It tries a direct path first, with public n0 relays helping when the devices can’t connect directly.

Explore iroh.computer

Direct when possible.

Hole punching helps devices find each other across networks. A relay provides a fallback path.

Relays carry encrypted traffic.

They don’t keep your Mentos account or store your posts and messages.

Choose your connection mode.

Use direct connections, relay-only mode, or Tor through a locally configured Orbot proxy.

MORE OF WHAT MENTOS CAN DO

A network you can use.
And understand.

Trade with peers, manage your MNT,
and see how your device connects.

CRYPTO & THE MNT WALLET

Your keys. Your transactions.

Send and receive Mentos (MNT), view transaction history, and track funds held in escrow. Signed account chains are shared between phones on the network.

MENTOS WALLET•••••• MNT
SendReceiveEscrow

MNT is the app’s own ledger asset, not a Bitcoin or Ethereum wallet. Network partitions can disagree; confirmations are not irreversible guarantees.

How the ledger works
THE PEER-TO-PEER MARKETPLACE

A market between people.

Buy and sell goods, post paid tasks, trade MNT, or offer spare storage and compute. Signed listings travel across the network.

ShopTasksExchangeResourcesAdsPlugins

Order and task payments use escrow, with acceptance, release, refund, and dispute flows. Reviews are tied to completed trades.

Explore the marketplace
NETWORK DIAGNOSTICS

See the connection clearly.

Inspect reachability, relay latency, and live QUIC connections. Find out whether traffic goes directly to a peer or through a relay.

Network diagnostics
ReachabilityConnection status
RelaysLatency measurements
Live connectionsPeer & transport details

Device checks also measure CPU, memory, free storage, and disk performance when you offer resources in the marketplace.

Under the hood

Cryptography starts with your identity.

An Ed25519 key identifies you and signs what you create. A 24-word recovery phrase restores that identity. The app encrypts its local database, and groups and spaces use shared encryption keys.

SMALL TOOLS. MORE POSSIBILITIES.

Make room for
your own ideas.

Give Mentos a new command, a personal tool, or a different look. Plugins run inside the app and build pages with its native UI.

Explore plugins
You choose what runs.Review permissions before installing. Disable or remove plugins in Settings → Plugins. The sandbox exposes only approved APIs.

TAKE A CLOSER LOOK

The app, from the inside.

Captured directly from the Flutter app.
Real widgets, fonts, and navigation. Demonstration data.

THE DETAILS MAKE IT YOURS

More than a place to talk.

Everyday social features, with controls
for the data and devices behind them.

Messages with a delivery trail

Direct messages use a durable queue for each recipient. Mentos distinguishes sending from delivery: an authenticated acknowledgement confirms arrival, and a separate receipt can confirm that it was read.

A little more detail

Pin, mute, archive, and organize conversations into folders. Group invitations are accepted before keys are shared; removing a member rotates the group key.

Calls, streams, and live sharing

Voice and video calls use their own media transport. Mentos also includes live streaming and live location sharing inside conversations.

A little more detail

Call media is accepted only from peers registered for that call. Real-time sharing depends on the participating devices being reachable.

Posts, stories, and communities

Publish posts, share stories, save drafts, and bookmark content. Spaces bring channels and forums together, while broadcasts let people subscribe to an author.

A little more detail

Public spaces can be discovered through marketplace directory listings. Posts are available from an online source or a device that has agreed to keep a copy.

Files with explicit custody

Manage transfers and inspect who holds what. Your content, content you agreed to keep, and temporary live content are treated differently.

A little more detail

Storage leases encrypt files on the renter’s phone. The provider receives ciphertext without the key, and periodic possession checks control escrow payouts.

Put spare capacity to work

Offer storage or a supported compute task through the marketplace. Device checks measure CPU throughput, memory, free storage, disk speeds, and network conditions.

A little more detail

Compute jobs use a fixed menu: compression, photo resizing and compression, and proof-of-work stamps. The renter verifies results before releasing payment; submitted files are not executed as code.

An identity you can take with you

Create an identity without an email address or phone number. Switch between local identities, protect access with a PIN, inspect stored data, and export your information.

A little more detail

The 24-word recovery phrase restores the identity key. Recovering the key alone does not recover every locally stored message or file; keep a data backup as well.

BUILT ON OPEN PROTOCOLS

One identity.
Several ways to connect.

A Rust iroh endpoint handles networking.
The Dart engine verifies, routes, and stores
what the Flutter app presents.

FlutterInterfaceDart engineSignatures & deliveryiroh / QUICEncrypted connectionsYour peersOther devices

Direct messages

mentos/0

Authenticated messages, receipts, payments, and control traffic over encrypted QUIC streams.

Delivery is tracked per recipient. Broadcasting a message does not count as delivery.

File transfer

mentos-blob/0

Content-addressed blob transfer, with SHA-256 checks before accepting a completed file.

The native transport also carries blobs on an existing direct connection; the blob protocol supports peers using a separate file connection.

Shared updates

iroh-gossip

Topic-based distribution for feeds, groups, spaces, marketplace listings, and the ledger.

Topic IDs are derived from labels. Signatures and scope checks still decide which updates a device accepts.

Live call media

mentos-call/0

A QUIC connection per call peer, using unreliable datagrams for real-time media.

Media is accepted only for peers invited to the registered call, so an open transport is not an open microphone.

Different conversations, different topics.

Feeds, spaces, and groups use author- or group-specific topics. Marketplace listings propagate on mentos-market-v1; the current coin ledger uses mentos-coin-v3. Devices exchange summaries to discover missing records when they connect.

Read the native transport source

WHAT PROTECTS WHAT

Privacy in layers.

Identity, transport, storage, and sharing
each have a different job.

IDENTITY & AUTHENTICITY

Ed25519 signatures

Your public key is your user ID and iroh endpoint identity. Signed envelopes preserve the author’s exact payload; recipients verify signatures and permissions before accepting it.

Ed25519 · BIP39
GROUPS & SHARED SPACES

Sealed group traffic

XChaCha20-Poly1305 seals shared group and space payloads. Membership controls who receives a key, and keys rotate when members leave.

XChaCha20-Poly1305
FILES & LOCAL DATA

Encryption on the device

The local database is encrypted. The file-encryption helper uses chunked AES-256-GCM with a fresh key per file; SHA-256 identifies and verifies transferred blobs.

AES-256-GCM · SHA-256

Where content lives matters.

Mentos does not have a central archive. Availability depends on reachable devices and the copies people consent to keep.

Owned
Created on this device, stored locally, and served to peers.
Kept
Another person allowed a copy, and this device accepted it.
Live
Temporary content in memory, dropped when no source is reachable.

A FEW THINGS TO KNOW

Open about
how it works.

What happens when someone is offline?

Two devices exchange data while both are reachable. A permitted keeper can provide a copy when the author is away. There is no central store-and-forward service; a queued message waits for a suitable connection.

Does peer-to-peer mean there are no relays?

No. Direct UDP paths are tried where possible. The public n0 relays help establish connections and carry encrypted traffic where needed. They do not host your Mentos account or archive your content.

What does a wallet confirmation mean?

Accepted means this phone counts the entry. Witnessed means another phone has voted for it. Final means the app’s witness threshold is met without a competing entry; Conflicted signals a competing entry. These are ledger states, not a guarantee of irreversible settlement. Disconnected parts of the network can disagree.

Read the ledger rules ↗
Can I hide my IP address from peers?

Standard mode allows direct connections. Relay-only mode avoids exposing a direct device address to peers. Tor mode uses relay-only networking with a configured local HTTP CONNECT proxy such as Orbot. Each mode has different connection and performance tradeoffs.

What does a recovery phrase restore?

The phrase restores the same signing identity. Messages, media, and other local content need a separate backup or an available authorized copy. Identity recovery and content recovery are different.

LESS BETWEEN YOU AND YOUR PEOPLE

Make yourself at home.

Your next conversation starts here.

Download on GitHub For Android arm64 · Choose the APK from the latest release.