Everything here is already public.

This site quotes Kloak’s own pages, the JavaScript they ship to browsers, the Play Store listing, Hacker News, YouTube, Buy Me a Coffee, and indexed Reddit threads. Reddit’s HTML is often a login wall for scrapers; those threads are cited from indexed copies of the live posts. The deleted gist is cited from search-index excerpts only.

Checked 20 September 2026. URLs rot. Quotes were taken from the live FAQ/privacy/terms/join/about bundles on that date (FAQ-Dbgb-pqA.js, Privacy-j4Z-XEOh.js, Terms-RUrjctEq.js, Join-C7WF7zvl.js, About-D1LPHIeO.js, Cookies-Rx9Rouzd.js, index-BqPYhYBf.js).

Official Kloak

  1. kloak.app · homepage copy, Play badge, “Soon” desktop/iOS, calenders.svg, production CSP, localhost leftovers, http Open Graph image
  2. About · quiet January 2026 launch, no promotion, team of five, no VC, no subscriptions, zero-knowledge “six months or 2 years”
  3. FAQ · accordion answers in /assets/FAQ-Dbgb-pqA.js: data collected, encryption “working toward,” no legal entity, GDPR “zero personal data,” mobile/desktop “Not yet,” donations via Buy Me a Coffee
  4. Privacy · last updated January 2025, collect messages, no IP logging claim
  5. Terms · “Kloak is not a company,” no jurisdiction, age 13 unverified, no AI scanning of private servers
  6. Cookies · “built everything in-house,” Local Storage called cookies, no consent banner
  7. Join Us · “server never sees your content,” 23 volunteer seats, Signal Protocol “on the horizon,” comfort with Lovable/Cursor/Claude/Copilot
  8. Child safety · updated July 2026, [email protected], Google Play child-safety standards
  9. robots.txt · blocks GPTBot, Google-Extended, anthropic-ai, CCBot, PerplexityBot
  10. sitemap.xml · https://kloak.app//auth double slash
  11. Client bundle · hosted-backend URL and anon JWT, service_role guardrail string, hCaptcha registration POST, wss://kloak-ws.fly.dev/socket, nitro-badge chunk name

Play Store, donations, listings

  1. Google Play: Kloak - Communities & Chat · Hedge Studio Labs, Lakshika Gayal, Sri Lanka, [email protected], 500+ downloads, updated 4 August 2026, Data safety “No data collected”
  2. Buy Me a Coffee: Kloak · 42 supporters
  3. Membership · Lite $5, Core $15, Titan $45, badges, “Lifetime of free, paid features”
  4. AlternativeTo about · “Developed by Jim,” proprietary, feature list including End-to-End Encryption, “micotransactions” in the blurb

Hacker News

  1. user lakshikag · created 12 January 2025
  2. Show HN: Kloak · “two of us,” no recovery, FAQ 404, philosophy/pricing comment, Tauri not Electron
  3. Kloak dropped into Discord Alternatives, Ranked
  4. Second drop in the same thread · promo video, “For now, yes” closed source
  5. Founder message quoted from inside the app · messages readable at the database, E2EE “not there yet”
  6. “Why would they name their software sewer?”
  7. Show HN: berrylog.app · “The very first thing I do when starting a new project is add analytics.” LLM writing comment
  8. Algolia: lakshikag submissions · Berrylog, Bugdrop, ItsLaunched, Kibun, Nooki, Buzzed.chat, Allo, Threadsky, Daynote, Bluesky polls, Kloak

YouTube

  1. Kloak promo · pinned FAQ: Discord UI copy, open source “considering,” self-fund plus donors, possible paid screen-share/storage
  2. How to create an account · secret key is the account, no recovery
  3. What are media channels? · comment on early AI tooling / Jim; “registration temporarily disabled”
  4. Third-party review · reads the privacy policy on camera, including the “we do not collect IP logging / device fingerprints” list

Reddit and forums

  1. r/kloakapp
  2. WE’RE REBUILDING THE FOUNDATION · 21 February 2026
  3. awdwadwa / invalid keys / extra members · 20 February 2026
  4. Promo thread · staff u/RandomDudeSL “I work on it, yes but not the founder”; FAQ quoted on paid voice/storage; donation tiers to $45
  5. Roadmap? · Windows app “end of this month”; question about another wipe
  6. Kloak is great · security shutdown “for a few days,” later deleted author
  7. Privacy Guides · not open source, not E2EE, “marketing and a lot of sites seem to claim that but it’s not”

Founder elsewhere

  1. @lakshikagayal
  2. berrylog.app
  3. kibun.social · still referenced from Kloak CSP
  4. itslaunched.com
  5. bugdrop.app

Deleted gist, search index only

  1. gist Androser420/ab2652aff5bd0add7facef5765af2c9a · 404 as of 20 September 2026. Title and excerpts remain in web search snippets: Lovable marketing site, alleged database exposure, rollback after talking to Jim. Used only as a pointer to claims we then checked against live files. No exploit text is reproduced here.

Name

Danish / Norwegian / Swedish kloak: sewer. See also the HN comment above. Unrelated projects reuse the word (Whonix keystroke tool, a Kubernetes secret rewriter, a Danish plumber helper now at kloak.lovable.app). Those are not this chat app.