Your Health Data,
Cryptographically Sealed.
Medodi is a 100% offline medical vault. Protected by Argon2id and on-device encryption, no one—not even our engineers—can access your records.
The Medical System
is Broken.
Your Most Intimate Data
is Sold to the Highest Bidder.
It's Time to
Take Control.
We Built a
Cryptographic Fortress.
"Your medical history is the most intimate data in existence. It shouldn't live in plaintext on a corporate server."
We live in an era where data breaches are inevitable. Hospitals are attacked by ransomware syndicates, and health tech startups often monetize user data under the guise of "improving services." When it comes to your health, this is unacceptable.
Medodi was born out of profound paranoia and a relentless pursuit of privacy. We realized that the only way to truly secure data is to ensure that we cannot access it ourselves. We are building a system where trust is mathematically enforced, not promised in a privacy policy.
By combining local hardware enclaves (FaceID/TouchID), Argon2id key derivation, and offline-first CRDT synchronization, we created a vault that guarantees your data remains yours. Even if our servers are completely compromised, the attackers walk away with mathematical noise.
This is not just another health app. It is a cryptographic shield for your biological identity.
Built for Extreme Paranoia.
We didn't just build an app. We built a cryptographic fortress that happens to store medical records. No compromises.
100% Offline Capable
Your medical records are stored locally on your device, accessible anytime, anywhere, without an internet connection.
Zero-Knowledge
We use XChaCha20-Poly1305 encryption before data ever leaves your device. The Medodi server acts as a blind relay. We literally cannot read your data.
Biometric Keys
Keys stored in the platform's encrypted keychain. Your device lock (FaceID/TouchID/PIN) gates access.
Anti-Forensics
FLAG_SECURE blocks OS-level screen recording and screenshots.
Cryptographic Sync
Multi-device synchronization via vector clocks (Epochs). Seamless merge conflict resolution without exposing plaintext.
Unified Ecosystem
Access your vault via iOS, Android, or Browser Extension seamlessly.
The Blind Relay Protocol
Medodi uses a Zero-Knowledge Sync Engine. Our servers only ever see encrypted blobs that they cannot unlock.
Local Encryption
Data is encrypted via XChaCha20-Poly1305 on your device before transmission. The master key never leaves your device.
Secure Transit
Encrypted blobs are sent over TLS 1.3 to our edge network. Even if intercepted, the data is mathematically useless noise.
Zero-Knowledge Rest
The Postgres database stores exclusively ciphertexts. No decryption keys are transmitted. The server acts as a blind relay.
Cryptographic Core
Medodi's architecture is built on audited open-source cryptographic primitives and follows RFC standards for key derivation and symmetric encryption. Hover below to explore the implementation.
Argon2id Key Derivation
Your Master Password is processed through Argon2id (RFC 9106) to generate a Root Key, mitigating GPU-based side-channel cracking.
XChaCha20-Poly1305 Enc.
The derived Root Key securely wraps the randomly generated Master Key using XChaCha20-Poly1305. This enables seamless password changes without re-encrypting the vault.
RAM Zeroing
Cryptographic contexts exist in memory strictly during active operations. We utilize memory-safe buffers to wipe keys instantly after use.
Self-Hostable Core
While we provide a managed Supabase relay, the open-source backend allows you to self-host your own blind relay server. Total autonomy over your encrypted data flow.
Shamir's Secret Sharing
We employ SSS for Social Recovery. Split your Master Key into M-of-N cryptographically bound shards and distribute them to trusted contacts. No single point of failure.
Zero-Knowledge Shares
Share a specific medical record with a doctor using an Ephemeral Symmetric Key embedded in a QR code. The doctor views the record once; the server sees nothing.
Take Back Your
Health Sovereignty
Your body. Your records. Your keys. Join the Medodi waitlist and be the first to experience true cryptographic privacy.