Notrus

Project information

Adds Notrus, a self-hostable encrypted messenger client for Android.

Source code and self-hosting documentation are available at: https://github.com/Justbeginwithit/Notrus

Notrus requires a Notrus relay/server to use. Users can self-host the relay or connect to a relay operated by someone they trust. The Android app is not useful as a standalone offline messenger.

Notrus is beta software. This submission does not claim that the app is audited, anonymous, or proven secure.

Metadata/build notes:

App ID: com.notrus.android License: Apache-2.0 Upstream source: https://github.com/Justbeginwithit/Notrus Upstream release/tag: v0.3.4-beta5 Android versionName: 0.3.4-beta5 Android versionCode: 7 Build subdir: native/android/NotrusAndroid A small fdroiddata patch removes upstream's local debug-signing fallback so F-Droid can build an unsigned release APK and sign it itself.

Dependency/privacy notes:

No Firebase, Google Play Services, ads, analytics SDKs, or crash-reporting SDKs were found in the Android Gradle configuration. Notification previews are generated locally after sync/decrypt. The relay is not trusted with message plaintext, attachment plaintext, private identity keys, local ratchet state, or recovery secrets. The relay can still observe account identifiers, public keys, linked-device metadata, opaque routing handles, delivery capabilities, timestamps, traffic patterns, and conversation membership needed for routing. Relay attestation enforcement is operator-configured.

Local verification performed:

F-Droid metadata YAML parsed successfully. fdroid-unsigned-release.patch applies to the upstream v0.3.4-beta5 tag. Patched build completed with: cd native/android/NotrusAndroid && ./gradlew clean assembleRelease Patched build produced: app/build/outputs/apk/release/app-release-unsigned.apk