Back to Nymbot

For immediate release

Nymbot launches an AI assistant that does not need to know who is asking

No account, no subscription and no name on the bill: every message is end-to-end encrypted, replies are paid for in Bitcoin a message at a time, and anonymous mode lets the service charge for an answer it cannot attribute to anyone. Available now on Google Play, Zapstore and the web.

September 15, 2026

21 Million LLC today announced the general availability of Nymbot, an AI assistant that asks for no email address, no phone number and no account, encrypts every message end to end, and sells replies for Bitcoin a message at a time instead of by subscription. Nymbot is available now as a web app at nymbot.ai/app, on Android through Google Play and Zapstore, and as an iOS build from source.

Every assistant in wide use starts with a sign-up, and everything after it is attached to that account: the questions, the payment method, the history. Encryption, where it exists at all, does not change who the bill is addressed to. Nymbot is built the other way round — the key on the device is the account, and the service is designed so that it can charge for an answer without being able to say whose question it was.

Encryption was never the gap. Attribution was.

Messages to Nymbot are end-to-end encrypted, but encryption alone still leaves the service holding a public key: the credit row, the conversation thread and the archived reply all hang off it. Anonymous mode closes that. The conversation moves onto a throwaway keypair generated on the device, and the credits move with it as blind vouchers in the Chaumian style a Cashu mint uses — the app blinds a random secret, the server debits the real balance and signs something it cannot read, and the app unblinds the result into a token the server cannot match to the nym that paid for it. Each signature comes with a proof that the published signing key was the one used, and the app refuses the whole move if that does not check out, because an unprovable signature is a tagging vector rather than a cosmetic problem.

While anonymous mode is on, read receipts, typing indicators, reactions and edits are held back, since each would carry the real signature into the same conversation and undo the point of it. If the app cannot honor that, it refuses to send rather than quietly falling back to the identity key.

No account to close, and no password to lose

There is no Nymbot account, because there is no directory to hold one. An identity is a Nostr keypair generated on the device the first time the app opens, or an existing key brought in by pasting an nsec, through a browser extension (NIP-07) or from a remote signer (NIP-46). That key is the identity, the conversation history and the credit balance at once: sign in with it on a second device and everything is already there, because nothing lives anywhere else. The stored key can be encrypted behind a password, a PIN, a passkey or a biometric.

The same key works in Nymchat, the messenger Nymbot is also built into. Credits bought in one are spendable in the other.

Paid by the message, in Bitcoin

Nymbot has no subscription and takes no card. Ten replies a day are free. Beyond that, credits are bought over the Bitcoin Lightning Network — ten sats for a standard reply, a hundred for a Pro credit — and spent one message at a time. A Lightning invoice carries no identity, nothing about a purchase has to be true about the person making it, and the claim is idempotent, so an app closed between paying and crediting lands the credit once rather than twice. Pro replies are metered on the tokens the model actually reads and writes, with a maximum reserved when the message is sent and only the real cost charged.

Every frontier model, routed or pinned

By default a message is classified and routed to a model suited to it, so a quick factual answer does not pay for a reasoning model and a hard question is not handed to a fast one; questions that turn on current information trigger a web search, with the sources listed underneath the answer. Anyone who wants a particular model's judgment can pin one instead — Claude, GPT, Gemini, Grok, Kimi, Qwen and MiniMax models are all in the catalog, which is generated live from what the server will actually accept and charge for rather than hard-coded into the app. An Effort setting decides how much work a reply is worth: one pass, a planned answer, or an answer the model reads back against the question and corrects before it is shown.

An assistant that works where the work is

With a Pro model pinned, Nymbot works inside a connected git repository the way a coding agent does — GitHub, GitLab or Gitea/Forgejo, reading the real files and, with writes enabled, changing them. The access token syncs only inside your end-to-end encrypted settings, and the request that lists what a token can reach goes straight from the device to the forge rather than through Nymbot's infrastructure.

Long replies that amount to a whole file are lifted out of the conversation into an artifact beside it, editable in place and versioned, with previews running in a sandboxed frame that cannot reach the conversations, the keys or the credits. Workspaces give a run of chats standing instructions, repositories and reference files, searched on the device so that only the passages that bear on a question travel with it. Bots are reusable ways of answering, and scheduled prompts ask a question on a timetable. Images, video and speech are generated by command, charged per generation, with a failed generation costing nothing.

Encryption that is already thinking about quantum computers

Messages travel as Nostr gift wraps: a rumor that is never signed, so it cannot be proved to a third party; a seal encrypted to the recipient; and an outer wrap signed by a single-use key with a randomized timestamp, which is all a relay ever sees. Over the classical elliptic-curve exchange, Nymbot layers ML-KEM, the NIST-standardized lattice key encapsulation, combined with it rather than replacing it, so an attacker has to break both. That defeats "harvest now, decrypt later", where traffic recorded today is stored until a quantum computer can break the mathematics it was encrypted with. There is nothing to switch on: Nymbot publishes a signed capability announcement carrying its KEM key, and the app publishes one of its own, which is how replies come back hybrid too.

What Nymbot does not claim

The project publishes its own limits, and they belong in any accurate story about it:

Availability and pricing

About Nymbot

Nymbot is a private AI assistant built on Nostr, an open protocol nobody owns. There is no sign-up: a keypair is generated on the device, or an existing Nostr key is brought in, and that key is the identity, the conversation history and the credit balance. Every message is end-to-end encrypted as a gift-wrapped Nostr event, with an ML-KEM layer alongside the classical exchange so that traffic recorded today survives a future quantum computer. Replies are paid for in Bitcoin over Lightning, a message at a time, and in anonymous mode the credits move as blind vouchers so that the service can bill a message without learning whose it is. Nymbot runs as a web app and as native Android and iOS apps, is licensed under the AGPL-3.0, and is developed by 21 Million LLC. Private. Paid in Bitcoin. Yours alone.

Press contact

21 Million LLC — [email protected]

Assets, boilerplate and fast facts: the Nymbot press kit. Technical detail behind every claim above: the knowledge base. Source code: github.com/Spl0itable/nymbot.

Journalism, reviews and commentary about Nymbot need no permission. The assets on the press kit page are free to use in coverage of the app.

###