Getting Ayooo onto a phone.

1 · Install the app

1. Download the app from the download page.
2. Open your Files or File Manager app — the icon that looks like a folder. Don't install from the browser's own popup: many phones block that, and it fails with "app not installed".
3. Go to Downloads and tap the file you downloaded (it ends in .apk).
4. Your phone asks "allow installing apps from this source?" once — tap allow. That's you trusting the file manager to hand the file to Android, nothing more.
5. Tap Install.

2 · Create your name

1. Open Ayooo and pick a username and password — no phone number, no email, nothing else.
2. Add someone by their username. They accept, and from then on you can call each other.

3 · Let it reach you

Phone makers put unused apps to sleep. A sleeping app can miss calls, so Ayooo shows a card on the home screen the first time — tap Allow, then:

Autostart

Allow Ayooo to start itself. The button opens the right page on most phones; if yours lands somewhere generic: Settings → Apps → Ayooo → Battery / Autostart.

Battery

Set background power to Allow or Unrestricted. On Xiaomi: Battery saver → No restrictions. On vivo/OPPO: Background power consumption → allow.

Calls over the lock screen

On Android 14+ the app asks for the full-screen notification permission — allow it, and incoming calls take over the lock screen like a normal phone call.

4 · The rules, in the open

Every limit below is enforced by the server today, not a plan. You should be able to know them before you hit one.

A declined request is a real answer

If someone declines your request, you cannot send them another one for 7 days. Declining exists to end an interaction, not to start a longer conversation.

Open requests are capped

A brand-new account (first 24 hours) can have 5 unanswered requests at a time; after that, 20. People can always find you by your username instead.

Scripted abuse is rate-limited

Sign-in attempts are capped per address (10 per 15 minutes), contact actions at 20 per minute, and call signaling at 30 per minute. These windows are far beyond anything a person does by hand.

Only accepted contacts can call you

Incoming calls from anyone else are refused by the server, not merely hidden in the app.

5 · Your security, plainly

Passwords

Stored only as scrypt hashes — a slow, salted function designed to resist cracking. They are never stored or logged in readable form, and sign-in checks a dummy hash so timing can't reveal whether a username exists.

Sessions

Signing in issues a token that lasts 30 days and can be revoked. Signing out kills the session on the server — not just on the phone — so a stolen phone can't be signed in later from somewhere else.

What the server ever holds

Signaling (who is calling whom, when), your account record, and call records (duration, path, quality). No audio, no video, ever — calls travel straight between the phones, because there is no media relay.

App data in backups

Android's cloud backup is switched off for Ayooo, so your session and settings aren't swept into a device backup.

Updating

When a new version is out, Ayooo shows an update card on the home screen. One tap opens this site and the install replaces the app in place — account and contacts stay. Never uninstall to update; installing over the old version is the whole point.

If a call won't connect

Ayooo connects phones directly whenever the network allows — that is why it is free and stays free. On strict office or hotel Wi-Fi, direct connection can be blocked; switching to mobile data usually clears it. There is no relay server that records anything, by design.