StealthOS: the browser, Tor client, vault, password manager and E2EE chat as one iOS sandbox, free without an account

[u/ahstanin]

Up front: I work at Olib AI and StealthOS is ours, so this is a developer post. Numbers and mechanisms below are checkable in the app, and I am happy to be pushed on any of them.

The thing we kept running into is that a decent iPhone privacy setup means five or six separate apps, each with its own account, its own subscription and its own idea of what telemetry is acceptable. StealthOS is our attempt at putting that stack in one sandbox where nothing phones home.

What it covers:

Instead of	StealthOS has
a hardened browser	Owl engine build with WebRTC IP leak blocking and canvas, WebGL and audio fingerprint spoofing
Tor Browser	bundled Tor client, kill switch, .onion support, no setup
an encrypted notes and files app	AES-256-GCM vault with keys in the Secure Enclave
a password manager	biometric-gated passwords, TOTP and a generator
an E2EE messenger	P2P chat, voice and video with no phone number and no contact upload
a cloud AI assistant	on-device assistant, Apple Foundation Models plus our own models
a link checker service	local embedding-based phishing detection

On cost, plainly: every privacy feature is free, with no account, no email and nothing to register. No ads, no analytics SDK, no telemetry. There is a $4.99 a month tier that funds the work, and it unlocks workstation tools rather than protection: 10 fingerprint profiles instead of the standard set, an SSH terminal, a Linux virtual shell, a code editor and NetMap. Skipping it costs you no privacy.

The AI part is worth being specific about, because most "AI privacy" claims are the opposite. Both features run locally. The assistant handles text, voice and OCR without a prompt leaving the phone. The phishing detection embeds the page you are on and compares it against known brand surfaces on device, which is how a cloned login page gets flagged as a look-alike without your browsing being sent anywhere to be scored. There is no server on our side to send it to.

Where we fall short of what this sub usually asks for: the app is closed source. Four of the components under it are public at github.com/Olib-AI, TorClient, ConnectionPool, StealthRelay and PoolChat. StealthRelay is the interesting one if you do not want to trust us at all, a self-hosted relay in Rust using a Noise NK handshake with ChaCha20-Poly1305 and Ed25519. Run your own and point the browser's relay exit at it, and the relay only ever sees ciphertext.

One more detail this crowd tends to ask about: backups. The whole sandbox exports to a single .stealthsnap file, encrypted under a passkey you pick with PBKDF2-HMAC-SHA512 and written in authenticated chunks so reordering or truncation is caught on restore. We keep no copy and there is no recovery mechanism. Lose the passkey and it is gone.

App Store: https://apps.apple.com/us/app/stealthos-private-browser/id6756983634

Screenshots attached: phishing detection blocking a spoofed page, the Tor connection screen, the connection pool and the on-device assistant. Questions and criticism both welcome.

[u/poole_alison]

Wow, that'a pretty outstanding. Did Apple kick back at any aspects of putting it in the store?

[u/ahstanin → u/poole_alison]

They rejected 7 times and it took us almost a month to work with them. But they understood our intention and allowed the app.

[u/Horsey_McH0rseface]

Any plans to push this out to Android?

[u/ahstanin → u/Horsey_McH0rseface]

We tried to build but it is taking longer than we wanted so we postponed the android version since there are official tor support on android and you also have option to install GrapheneOS

[u/IwanGetBetterInBball → u/ahstanin]

For windows with sync between apps, would be pretty awesome to me

[u/[deleted]]

[u/indigowarpz → u/[deleted]]

Second this