Start with an invitation
No account to create. A one-time code activates your device for the private beta.
TAVI gives your Android phone an encrypted connection through a private server. Activate with an invitation, then connect with one tap.
Built for a small group. The Android app is still being tested.
A small Android app with a straightforward way to connect and disconnect. Access is given personally by invitation.
No account to create. A one-time code activates your device for the private beta.
Turn the connection on or off in the app. Android asks for your permission before the VPN starts.
The app creates your private key on the device and stores it in encrypted local storage. The server receives only your public key.
You need an Android phone, a beta APK, and an invitation from the person who gave you access.
Your inviter shares the Android APK with you. There is no public app store release yet.
Install the APK on Android 8 or newer, open TAVI, accept the data notice, and enter your one-time invitation code. It expires after 30 minutes.
Approve Android’s VPN request. The app shows when a fresh handshake with the server is available.
Open a successful “Beta Android APK” run in GitHub Actions, download the tavi-beta-debug artifact, unzip it, and install app-debug.apk. This is a testing build; public APK downloads are not available yet.
TAVI is a closed beta. Here is the data the service uses to activate your device and maintain access.
Website addresses, browsing content, and DNS query history are not recorded by the TAVI service.
Activation IP and brief connection metadata, including endpoint IP, handshake time, and traffic volume, are cleared after 30 days.
Device name and public key remain while access is active. If access is revoked, its record is removed after 30 days. Your private key stays on your phone.
Not yet. This beta is for Android 8 and newer.
Android can block traffic outside the VPN. Turn on “Always-on VPN” and “Block connections without VPN” for TAVI in Android settings if you want this protection.
No anonymity guarantee. It routes traffic through the private server; websites and other services can still identify you in other ways.
Disconnect in the app. To revoke device access, ask the person who invited you.