Native Android client for our fediverse instance. Fork of Pachli (the actively-maintained Tusky successor) with embedded Tor, hard-pinned to social.anonymous.gratis (no instance picker — one tap, you're in), Anon palette, and PIN/biometric lock with PANIC wipe. 74 MB. Hard-pinned instance — sign in to social.anonymous.gratis, no "which server?" question. You can still follow + interact with anyone on the entire fediverse (Mastodon, Pleroma, GoToSocial, Pixelfed, …) since GoToSocial is the protocol layer; the app just removes the cognitive load of picking a home server Embedded Tor — same Guardian Project tor-android we ship in Mail / Mumble / WhistleBlower. Boots on app start, every API call + media upload routes through SOCKS5 127.0.0.1:9050, hostname resolves inside the Tor circuit Mastodon API compatible — inherits Pachli's full Mastodon-API surface: home / federated / local timelines, threads, DMs, media uploads, profile editing, bookmarks, lists, push notifications via UnifiedPush (NOT Firebase) PIN + biometric lock — PBKDF2-HMAC-SHA256 (100k iter, 32-byte salt) in EncryptedSharedPreferences. Class 3 (strong) biometric only. 60 s grace on background. Same lock pattern as Anon PGP / Mail / VPN / WhistleBlower PANIC wipe — lock-screen panic-button calls Android's clearApplicationUserData() — nukes the Mastodon account, OAuth tokens, drafts, media cache, AND the PIN itself in one shot. App looks like a fresh install on next launch. Server-side data on social.anonymous.gratis is NOT affected FLAG_SECURE always — screenshots + Recent Apps thumbnail blocked on every activity, independent of lock state No Google Play Services, no Firebase, no analytics, no telemetry. UnifiedPush is the optional push-notification path; without it, you pull-to-refresh. Free software under GPLv3 F-Droid repo: https://anonymous.gratis/fdroid/repo Tip portal: http://ieyezgeojxw73hv4szrkbreea3rd6ri7xfbevngi63uabothn226euyd.onion