The amount stays on your phone
A transfer publishes a commitment and a proof. No amount is ever transmitted to Prova, so there is no ledger of what you send for anyone to leak, subpoena or sell.
UAE → India · Stellar
Send money home without broadcasting it.
Prova proves your transfer is compliant on your own phone. The amount, the recipient and your documents never leave it — only a proof does.
On the Stellar test network with test assets. Today you can send to other Prova users. Withdrawals to a bank account will follow once a licensed partner is connected.
Private by construction
Nobody sees your money — including us.
Privacy here is not a policy we promise to keep. It is what the system is physically able to know, which is almost nothing.
Your documents never upload
Identity checks run on the device. Photos of your ID and your face are read where they were taken and are not sent to us — there is deliberately no endpoint that could receive them.
Your keys, held by you
Spending keys are generated in your phone’s secure hardware and never leave it. We cannot move your money, freeze it, or recover it for you — and neither can anyone who compromises us.
How it works
Four steps, about a minute.
The heavy work — proving you are allowed to send this — happens on the phone in your hand, in a couple of seconds.
Verify once
Confirm your identity in the app. A person on our team reviews it, usually well within 24 hours.
Add money
Top up, then move it into your private balance. That step is public by design — the anchor already knows.
Prove and send
Your phone builds a zero-knowledge proof in a couple of seconds. Only the proof is submitted.
They receive
Settlement lands on Stellar in seconds. What the network records reveals no amount and no names.
Compliance
Private does not mean unaccountable.
Every transfer carries a proof that the sender is verified, within their limit, and that their verification has not expired. The proof is checked by the network. What it does not carry is who they are.
Verified, without identifying you
Approval issues a credential to your device saying only that you are verified, your tier, and when it expires. Your transfer proves it holds a valid one — it does not attach it.
Limits enforced by the network
Tier limits are checked inside the proof, not by the app. A modified client cannot exceed them, because the contract will not accept a proof that says otherwise.
Credentials expire
A credential lives on a phone and cannot be revoked remotely, so it is short-lived by design. Renewal re-screens, which bounds how long a stale approval can be used.
An audit trail that holds no identities
Every verification decision is recorded immutably — what changed, when, and who decided. The subject is an opaque hash, so the trail proves the process without exposing the person.
~2.6s
Proof built on a mid-range phone
5s
Typical settlement on Stellar
0
Amounts stored on our servers
0
Documents uploaded to us
Get the app
Try Prova on Android
Prova is an Android app. It runs on the Stellar test network, so balances are test assets with no monetary value and the network can be reset at any time — try it freely, but do not treat what is in it as savings.
The download is not up yet — we are finishing the first public build.
Email me when it is readyYou will need to allow installing from outside the Play Store. Prova is not on the Play Store yet — a payments app has to clear their financial-services review first, and we would rather ship it there properly than not at all.