INVITE ONLY
OBSERVATORY

Pricing

Nothing here is for sale yet.

v1 sells nothing. Every invited account carries every capability in this build, and no screen in the app takes money. When the tiers open there is no free seat, because a free seat is paid for with the person sitting in it.

v1 sells nothing Every chat at maximum, every tier

The three tiers

01 Tier

Philanthropic

Not for sale in this build

The full messenger at maximum capability.

  • Text, photo, video, and voice messages at maximum security
  • Voice and video calls, post-quantum keyed
  • Groups, with names and subjects sealed end-to-end. Channels ship after v1
  • Every protocol: Q-Ratchet, ML-KEM-1024, ML-DSA-87, X25519, ChaCha20-Poly1305
  • QLEAP 3-hop onion circuit — not in this build; the packet-tunnel provider requires an Organization Team ID
  • HYDRA mesh failover
  • HydraSIM eSIM with pay-as-you-go data — the courier reports the server provisioning rung honestly; live carrier provisioning is not enabled yet
  • Panic Wipe, Decoy PIN, Capture Scenario, Silent Distress
  • Screenshot and screen-recording blocker
  • On-device intelligence shield and Forensic Shield
Request an invite

02 Tier

Armed

ARMED — FOR EVERYONE

Not for sale in this build

The whole ecosystem, unlocked.

  • QLEAP onion VPN — ML-KEM-1024 per hop, ML-DSA-87 signed directory. Not in this build
  • Qaduceus AI assistant (research preview)
  • System ID, and the QVault and QMail apps it unlocks — after v1; the row ships as a labelled roadmap signal
  • HydraSIM: 3 GB/mo bundled — with the tier, when the tier opens
  • Steganography: messages carried inside images
  • Roadmap transports — Aqua Comm, QSONAR network, NFC and optical key exchange. Present in the app as disabled rows, not as options
  • Team awareness dashboard and chat — roadmap; both rows ship disabled
  • Frontline Mode — named on the roadmap; no shipping surface carries it yet
  • Tamper Self-Test, Quality Self-Test, signed Transparency Snapshot
Request an invite

03 Tier

Shadow

Not for sale in this build

The underground, for work that cannot surface.

  • Not in this build — the Underground compartment opens after v1, and carries every line below
  • QSeal post-quantum authentication
  • Shadow ID
  • Ghost Serpent decoy traffic
  • Garlic routing
  • Phantom Calls
  • Unlimited HydraSIM data
Request an invite

Tiers only ever add.

Every existing feature runs at maximum capability for everyone. Higher tiers unlock new capabilities — apps, tools, modes — and never upgrade a primitive you already had.

security(session) = min(security(A), security(B))

A session is only as strong as its weaker end — so there is no weaker end. Hybrid ML-KEM-1024 + X25519 key agreement, ML-DSA-87 identity signatures, and ChaCha20-Poly1305 sealing run identically for every seat, on every tier.

When the tiers open, retiring one is a billing-state change and never a data event. Identity keys, IDs, history, contacts, vault, mail, and memberships are preserved.

Every locked tile stays visible, with its key named on the face.

None of these tiers is purchasable in this build, so nothing below is gated today: what ships, ships for every invited account. When the ladder opens, a retired tier leaves the same tiles on your screen — locked, labeled, and one tap from unlocking again. Nothing disappears.

Unlocked with Armed

QLEAP VPN Unlocks with Armed Three hops. Zero memory. Qaduceus AI Unlocks with Armed Research preview An intelligence that shows you its thinking. QMail Unlocks with Armed Mail sealed to the recipient. Burn-after-read when it matters. QVault Unlocks with Armed Secrets sealed under Argon2id and hybrid-wrapped ChaCha20-Poly1305. QWallet Unlocks with Armed Self-custody, every transaction signed under ML-DSA-87. Wadjet Browser Unlocks with Armed In development A browser that shows you the threat before the page loads. HydraSIM Unlocks with Armed A sovereign eSIM with six-bearer failover.

Unlocked with Shadow

QSeal Unlocks with Shadow Post-quantum authentication for the deepest work. Shadow ID Unlocks with Shadow An identity that answers to no directory. Ghost Serpent Unlocks with Shadow Decoy traffic that buries the pattern of your day.

Government & Defense

Fleet enrollment under annual agreements, with an evidence package your evaluators can verify line by line.

Start procurement
Request an invite Procurement

The hard questions.

What does an invited account get?

Every capability in this build, with no tier gate anywhere in the app. There is no purchase screen, no checkout, and no receipt path in v1 — the checkout rail refuses before a session is minted.

When the tiers open there is no free seat. A free seat is paid for somewhere, and the currency is usually the person sitting in it: QERYX carries no ads, no telemetry sales, and no harvested address book, so the subscription is the entire business model. The only party QERYX answers to is the person holding the phone.

No. Every conversation between any two QERYX seats runs the same maximum: hybrid ML-KEM-1024 + X25519 key agreement, ML-DSA-87 identity signatures, ChaCha20-Poly1305 sealing. Higher tiers unlock new instruments — a VPN, a vault, mail, the underground — and never touch the crypto you already have.

The floor formula is the reason: a session is as strong as its weaker end, so selling a stronger end to some seats would weaken every conversation they have with everyone else.

When the tiers open, retiring one is a billing-state change and never a data event. Identity keys, IDs, history, contacts, vault, mail, and memberships are preserved.

Locked tiles stay on your screen with the unlock named on their face. A downgrade deletes nothing.

You do not. The app takes no money in this build — there is no purchase surface in it, and the checkout rail refuses before a session is minted. Registration is invite-gated instead: request an invite.

When billing opens it runs in-app, in Settings. A web checkout is roadmap and will say so here the day it ships.

Fleet enrollment is priced per agreement, annually — never as a public card. The procurement lane carries an evidence package your evaluators can verify line by line.

Start procurement

Carry the maximum.

Every tier is the same messenger at full strength. v1 charges nothing for it, and registration takes an invite code.

Request an invite Read the security spec

Next: Download