Building a privacy-first platform

It's easy to say 'privacy-first.' It's harder to build a system where privacy is the path of least resistance. That's the bar we hold ourselves to.

Concretely: the desktop app stores your workspace, identity, and messages on your own machine. Telemetry is off by default, and the app tells you so with a visible status indicator - not buried in a settings page. There's no account to create just to open the app.

The architecture reinforces the promise. Because state is local-first, there's simply nothing to harvest by default. When networking arrives, it will be something you opt into - a server you run or choose to join - not a cloud you're silently enrolled in.

Privacy also shapes what we don't build: no engagement loops, no dark patterns, no notifications engineered to pull you back. Restraint is a feature.

The goal is software whose incentives are aligned with the person using it. Built for people, not platforms - starting with where your data lives.