A pre-release dating client built around data minimization. Exact GPS is converted to a coarse area on-device, and direct messages are end-to-end encrypted. The first services are operated by OpenDating while federation is developed after reliable general availability.
A dating app that respects you — not your data.
Your account is based on a cryptographic keypair stored in device secure storage. The current advanced recovery flow can export it; passkey recovery is required before launch.
Only your general area (~5 km) is shared. Your exact GPS coordinates never leave your phone. Not to us, not to advertisers, not to anyone.
All conversations are end-to-end encrypted with NIP-44. Nobody — not even the relay operator — can read your messages.
Likes are private — the other person only knows if you match. Blocks happen instantly and are never announced. Reports are encrypted to moderation.
Photo-first cards, gesture-driven discovery, native navigation, dark mode, and accessibility foundations for iOS and Android.
Built on Nostr and the open OpenDating protocol. The current profile, discovery, matching, moderation, and deletion services are operated by OpenDating on Cloudflare.
The launch standard is defined by verifiable commitments, not unsourced competitor scoring.
| Commitment | Current state | GA gate |
|---|---|---|
| No paid ranking or boosts | Product policy | Entitlement and ranking tests |
| Safety features remain free | Product policy | Store and server enforcement |
| Exact GPS stays on-device | Implemented | Independent privacy test |
| Direct-message content is end-to-end encrypted | Implemented | Independent security review |
| Transparent daily recommendations | Planned | Fairness and liquidity gates |
| Passkey recovery and native signer | Blocked | Physical-device recovery tests |
Every architectural decision was made to protect you — not to monetize you.
You don't need to understand Nostr. Just create an account and start discovering.
A secure keypair is generated on your phone. No email. No password. No phone number.
Add photos, a bio, interests, and what you're looking for. Your data stays with you.
Share only your general area (~5 km). Your exact coordinates never leave your phone.
Browse real people nearby. Like privately. Match when the feeling is mutual.
Source available for development and security review. Store distribution is held.
The stale submission is not approved to ship. Invited testing resumes only after the documented release gates pass.
Build from SourceThe Android artifact remains draft. Developers can build from source for isolated testing.
Build from SourceOpen source under MIT. View on GitHub →
Thoughts on privacy, decentralized dating, and building ethical technology.
Practical guidance for spotting scams, planning safer meetings, protecting private information, and reporting concerns.
How encrypted gift wraps and role-separated first-party services work today, and what federation still needs before providers are interchangeable.
See why production distribution is blocked and which reliability, safety, legal, and security gates remain.