Among people you know,
with no one looking in.

A closed network you join through people you know. Posts, replies and photos are sealed on your device as they travel, and the server can’t read what’s inside.

Joining is by invitation only

01 Backers

Two backers
make you a full member

Someone you know who’s already here confirms you through their invitation link, and you’re in. They become your first backer. The first person besides them you become fam with is your second, and with two you’re a full member. For the first 1,000 people, one is enough.

Since the only way in is an invitation, there’s no room for ad or spam accounts.

The two halves of the logo say the same thing. Only when they meet does the middle fill in.

Waiting for someone you know to confirm

02 Fam

Fam, and
Emma’s fam

People who know each other are fam. When someone asks to join your fam, a fam you share shows up next to their name — “Emma’s fam” — and your phone checks it from both people’s signatures.Arriving with public launch

From someone’s page you can cross over to their backer and look around, from backer to backer, as far as their cards are open to you. You can also introduce two people in your fam to each other.

MeEmmaEmma's backer

03 Sealed

Not even the server
can read it

Posts, replies, photos and profiles are all end-to-end encrypted. They’re locked on the writer’s device and opened on the reader’s. On the server, the content exists only as ciphertext.

It doesn’t even know namesArriving with public launch
Every name on our server is sealed. Your card opens to your fam, to every member if you choose Everyone, and to the people you hand it to.
Link previews, sealed too
The writer’s device builds the preview and seals it with the post. The reader’s device never contacts the site.
No screenshots
The screen you’re viewing can’t be captured.

Security design

Ciphertext only
Name
Qm9mWzJ4c2E=
Bio
aF3kL0pZq8Rt1VwXc7Nd2Yb=
Post
t7Gx2WmQ0vKc9LrP4aHs1ZeY8bNf3JuD6oTq5Ri=
Reply
Xw4Pn8Cb1Qe7Kr2Mz9Hd5Ls0Ua3Tg6Vj1Yo8Ft=

04 Replies

Only people in the chat
see a reply

Reply to a post and a chat starts between you and the writer. Anyone in it can invite their own fam to talk together, and people who join see only the replies from then on.

Pass to fam

If it’s a question you can’t answer, pass it to someone in your fam who might know. A post moves one person at a time, from one person you know to the next.

Emma Hayes
2h

Off to Austin this weekend. Anyone know a good taco place?

Only Emma can see this
There’s one on a side street off South Congress.
Oh, where? Could you send me a map?
ReplyPass to fam
Hidden from fam who aren’t in the chat
Passed by Sam Carter

You lived in Austin for years, you’d know

Olivia Brooks
2h

Moving to Austin next month. Anyone know a good neighborhood?

05 Calls

Encrypted calls,
only with your fam

Talk with your fam by voice. Your voice travels encrypted between the two phones only, and call history stays on each phone. There are no call records on our server.

Intercept it and it won’t connect
Each phone signs the connection details with its own key. If someone swaps them in the middle, the signature won’t match and the call won’t connect.
Only the receiving phone knows the name
The receiving phone unseals who’s calling and shows it on the ring screen. Our server doesn’t know the caller’s name.
Mute is yours alone
When you turn off your mic, nothing shows on the other screen. If you can’t pick up, you can decline with a short note.
Hang up and the mic closes first

06 Recovery

Even if you
lose your phone

Set a PIN and leave key pieces with your fam ahead of time. On a new phone, once your PIN checks out and the people in your fam holding your pieces confirm it’s you, your account comes back.

What our server holds isn’t enough to open it.

Security design

It opens with an invitation

Joining is by invitation only