Say what
you really mean.
Anonymous whispers from people near you. No profiles, no followers, no history. Just raw, honest thoughts that disappear in 48 hours.
Honesty needs
a safe place.
Built from the ground up for privacy, with every feature designed to let you speak freely without consequences.
Ghost Identities
Every post gets a fresh, random identity. No profile, no history, no way to connect your whispers. You're a new person every time.
Hyper-Local
See whispers from your neighborhood, campus, or city. Adjust your feed range from nearby blocks to worldwide. Real thoughts from real people around you.
48-Hour Lifespan
Every whisper disappears after 48 hours. No permanent record, no digital footprint. Say it, mean it, let it go.
End-to-End Encrypted
DMs are sealed with ChaChaPoly encryption using ephemeral keys. Not even we can read your private conversations.
Mood Backgrounds
Pick from curated photo backgrounds or mood-matched gradients. Shuffle until it feels right. Every whisper is a visual card.
Safety First
On-device AI moderation, request-based DMs with trust scores, and rate limiting. Connection without the predator pipeline.
Trending & Discover
See what's resonating near you and worldwide. A featured hero card for the #1 trending whisper, ranked lists, and a global feed.
Share as Image
Turn any whisper into a beautiful shareable card. No metadata, no identity — just the words and the hearts. Perfect for stories.
Community Curation
Hearts for support. "Not for me" to quietly hide. Reports for safety. No downvotes, no pile-ons — just signals that shape a healthier feed.
Every screen,
designed with care.
From composing your first whisper to encrypted conversations that vanish — here's how it feels.
Express yourself.
Anonymously.
The compose screen shows a live preview of your whisper card as you type. Pick a mood background, choose your stream, and post under a fresh Ghost ID.
- Photo or gradient backgrounds — shuffle until it fits the mood
- Fresh Ghost ID per post — tap to regenerate
- Lock DMs per whisper — your call, every time
- AI safety gate scans before posting — invisible when clean
Safe connections.
On your terms.
No instant DMs to strangers. Someone sends a request, you see their trust score, and you decide. Accepted chats are end-to-end encrypted and auto-expire.
- Request-based DMs — you choose who gets through
- E2E encrypted with ephemeral keys per conversation
- 48-hour auto-expiry — visible countdown in every chat
- Behavioral trust scores — not identity, just behavior
What's resonating
right now.
The Discover tab surfaces what matters. A featured hero card for the most-hearted whisper, ranked trending lists, and a worldwide feed showing whispers from everywhere.
- Trending — most hearted whispers in the last 24 hours
- Worldwide feed — whispers from every corner of the globe
- Featured hero card for the #1 post with full engagement stats
Private archive.
Only yours.
Your profile shows stats and a local-only archive of your whispers. See what's live, what's expiring, and what's already gone. Nobody else can see this list.
- Posts, hearts, and days active — your anonymous footprint
- Expiry countdown — see which whispers are still live
- Delete everything — nuclear option to wipe all keys and data
Content first.
Identity never.
See real whispers in under 10 seconds. No sign-up, no email, no phone number.
Open the app
No account creation. Your device generates a cryptographic identity in the Secure Enclave. You're ready.
See your area
GPS converts to a spatial index on-device. Your exact location never leaves your phone. You see whispers nearby.
Say something real
Pick a mood background, write what's on your mind. A fresh Ghost ID means nobody knows it's you.
Connect or don't
Heart whispers. Reply publicly. Or send a DM request. Everything encrypted, everything ephemeral.
Find your frequency.
On-device AI auto-categorizes every whisper so you can tune into what matters to you.
Privacy isn't a feature.
It's the foundation.
We didn't bolt privacy on after the fact. Every line of code, every architectural decision, every interaction — designed so we literally cannot identify you.
- ✓No email, no phone, no name — ever
- ✓GPS converts to spatial index on-device before any network call
- ✓Cryptographic keys live in the Secure Enclave — not on our servers
- ✓Content moderation happens on-device, pre-encryption
- ✓48-hour TTL — we don't keep what we don't need
- ✓Device attestation prevents bot armies — without tracking identity
Secure Enclave Identity
Your device generates a P-256 key pair in Apple's Secure Enclave. The private key never leaves the hardware. Not even the OS can extract it.
Spatial Privacy
We use H3 Resolution 7 hexagonal indexing. Your GPS coordinates become an area code covering ~5 km². Precise enough to be local, vague enough to be safe.
Ephemeral by Design
Every whisper, every DM, every interaction has a 48-hour countdown. Server-side pg_cron jobs and R2 lifecycle policies ensure nothing survives past its expiry.
Pre-Encryption Moderation
On-device NLP scans content before encryption. Flagged content never reaches the backend. Your safety filters stay private — we never see your preferences.