It says, that only my "friends" can know my IP. But it's still insecure. Tox makes it better, IP addresses aren't exposed, users are identified by their public keys only.
https://tox.chat/faq.html#tox-leak-ip
This project uses the retroshare protocol. It's also p2p by the only nodes you can connect to are from a "white list". So you expose your ip only to people you know.