Switching messenger isn't moving.
Since Chat Control 1.0 was extended on 9 July 2026, voluntary scanning of readable content is legal in the EU until 2028 — on services like Gmail, Facebook Messenger, Snapchat and Skype. The common reaction is to install Signal. It is a good instinct, and it is incomplete: Signal does not give you a mailbox, a drive, or a calendar.
What each option actually covers
The honest version, including the options that are not us:
| Messages | Files & photos | Calendar & docs | ||
|---|---|---|---|---|
| Gmail · Messenger · Snapchat · Skype | Readable | Readable | Readable | Readable |
| Signal | End-to-end encrypted | Not offered | Not offered | Not offered |
| Proton · Tuta | End-to-end encrypted | End-to-end encrypted | End-to-end encrypted | End-to-end encrypted |
| uOS | End-to-end encrypted | End-to-end encrypted | End-to-end encrypted | End-to-end encrypted |
Read that table honestly: if all you change is your messenger, three of your four columns stay readable — and legally scannable until 2028. And Proton and Tuta are genuinely good: they cover the whole set, they are European, and they cannot read your content either. Anyone telling you they are the "only" option is selling you something.
So where does uOS actually differ?
Not on coverage — on architecture. Proton and Tuta are suites of separate applications that each encrypt their own silo. uOS is an operating system:
- One boundary, not one per app.Mail, files, documents and chat run inside a single end-to-end encrypted, post-quantum perimeter that every enveloped app inherits — one thing to trust, not five. Calendar and AI run in the same workspace under the same authentication, but their stored content is not yet inside that perimeter.
- One identity, one encrypted file system.A file created in documents is the same file your mail attaches and your chat shares — it never leaves the encrypted boundary and is never copied into a separate product's silo.
- Post-quantum by default, everywhere.ML-KEM-768 (FIPS 203) for key exchange and ML-DSA-65 (FIPS 204) for signatures, applied at the operating-system layer — not as a per-app feature, and not only for mail.
- No password database at all.Your identity is derived on your device from secrets you control. There is no central store of passwords to breach, and no server-side key that could open your workspace.
What moving actually involves
- Nothing to install — uOS runs in your browser, on any device.
- Nothing stored on the device — each session starts from a wiped state.
- One move, not four — mail, files, docs, chat and calendar arrive together.
- Free forever for individuals and families. Invite-only while we scale.
The point isn't that everyone else is bad. It's that changing messenger protects the smallest surface you own, while your mail, files and photos stay exactly where they were.