Security isn't a feature.
It's a promise.

Privacy is a right, not a premium tier. Every Athion product is built with encryption by default, minimal data collection, and zero access to your content.

Principles

How we protect you.

End-to-End Encryption

Every voice call and message in Flux is encrypted end-to-end. We use ECDH P-256 for key exchange and AES-256-GCM for symmetric encryption. Not even we can access your content.

Zero Knowledge

We don't read your messages. We don't listen to your calls. Encryption keys are generated on your device and never leave it.

Forward Secrecy

Each session generates fresh ephemeral keys. Compromising one session cannot decrypt past or future communications.

Minimal Data Collection

We store only what's necessary to operate the service — account credentials, server membership, and message metadata. Message content is encrypted at rest.

Open Protocols

Our encryption implementation follows well-established cryptographic standards. No proprietary algorithms, no security through obscurity.

Transparency

We believe trust is earned through transparency. Our security model is documented, our protocols are standard, and we welcome scrutiny.

Cryptography

The specifics.

We use industry-standard cryptographic primitives. No custom algorithms, no shortcuts. Every component of our encryption stack has been vetted by the broader security community.

Key Exchange

ECDH P-256

Symmetric Cipher

AES-256-GCM

Key Derivation

HKDF-SHA256

Message Auth

HMAC-SHA256

Media Transport

DTLS-SRTP (WebRTC)

TLS Version

1.3

Found a vulnerability?

We take security reports seriously. If you've found a vulnerability in any Athion product, please reach out responsibly.

security@athion.com