App and domain rules on one screen
An app rule and a domain rule sit side by side on one coherent screen. They switch on with a toggle and read like phone settings — there is no JSON to edit and no reason to.
Social apps — through a proxy.
Your bank — direct.
Each app gets its own server, and several run at once — no switching between profiles. Any subscription or link you already have will work: Stealtify reads them all. Rules sit on one screen, with no config files to edit. No root required.
Everything you need for app-level privacy
Full control over your network traffic — through your own servers and subscriptions.
DNS Filtering
A request to an ad domain never leaves the device: it is cut at name resolution, before a connection is opened. The filter covers all traffic, whichever route an app takes.
Connection Monitor
Traffic is counted per app and written to the connection log. Health checks poll the servers as you go: when the chosen one stops answering, connections move to the backup without you.
Easy Import
vless://, vmess://, trojan://, ss:// and awg:// links are parsed whole, with every transport parameter. A QR code is read by the camera, and your own server can be shared back — as a QR code or a link on the clipboard. The set of servers and rules you build exports to a single encrypted file.
Zero Telemetry
User data is not collected, not stored and not sent anywhere. What is absent is named item by item: the list below is an inventory, not a promise.
What is never collected
- An account — there is no sign-up at all
- Connection logs: no addresses, no timings
- DNS query history
- Analytics and crash reports
- Device and advertising identifiers
Dual-Engine Architecture
The client picks the engine itself: native Kotlin for the simple transports, Go where encryption and obfuscation are needed. From outside it is one connection; inside, two different implementations.
The engine is picked by transport — there is nothing to choose by hand.
App and domain rules on one screen
Decide once and see the whole picture: what goes through the proxy, what goes direct. No config files, no restarts.
DNS Filtering
Ads and trackers drop out across every app at once. No separate blocker to install.
Connection Monitor
See which app spent what, and where it went. A server that goes down is noticed by the client itself.
Easy Import
A subscription is added by pasting a link or scanning a QR code. No typing addresses, ports and keys by hand.
Zero Telemetry
Nothing to leak: the app collects nothing about you. No account, no logs, no analytics.
Dual-Engine Architecture
Fast transports run on the native stack with no extra layer on top. Heavy encryption goes to xray.
Get started in three simple steps
01
Add Proxy Servers
Configure manually or import via URI / QR code. SOCKS5, HTTP, SSH, VLESS, VMess, Trojan, Shadowsocks, AmneziaWG — all supported.
Name
US VLESS
Type
VLESS + Reality
Host
your-server.com
Port
443
02
Create App Rules
With no rules at all, everything goes through the proxy. The moment a rule appears, it assigns the app or domain to a group, and that group's proxy decides where their traffic goes; anything the rules do not cover goes direct.
YouTube
→ US VLESS
Instagram
→ DE VMess
Telegram
→ NL Trojan
03
Connected
Connect
Tap Connect — Stealtify brings up a local VPN and routes traffic by your rules.
8 supported transports
Everything the client can connect to. The servers are yours — bring your own subscription or VPS.
| Transport | Auth | UDP |
|---|---|---|
| SOCKS5 | user:pass | supported |
| HTTP CONNECT | Basic | not supported |
| SSH Tunnel | password | not supported |
| VLESS | UUID | supported |
| VMess | UUID | supported |
| Trojan | password | supported |
| Shadowsocks | password | supported |
| AmneziaWG | keys | supported |
Your own proxy on the TV
TV boxes get their own app — StealtifyTV. Routing works the way it does on the phone: you pick which app goes through the proxy and which goes direct. The router is left alone.
-
Domain rules and groups
The box's traffic goes through the proxy you pick, and domains and server groups are set up as on the phone. The local network stays reachable.
-
Works from the remote
Every key action is reachable with the D-pad: navigating the server list, importing a subscription, connecting.
-
No network changes
Nothing is configured on the router and no other device in the house is affected.
A recommended client for your panel
You sell subscriptions, we build the client. Stealtify provides no servers and does not compete with you for traffic.
One link to import
The user taps a link in your dashboard and the whole subscription is pulled in — no parameters copied by hand.
Fewer support tickets
Setup is an import plus one rule, so the usual first-run questions never reach your support.
Predictable UX
You know what your customer sees, so the guide is written once instead of after every third-party update.
Ready to take control of
your app traffic?
Download Stealtify and start routing each app through its own secure tunnel. Free, no account, no root required.
Android 10+ (API 29)
No root required
~51 MB · arm64-v8a