locate. Location sharing the server cannot watch.
Family location sharing is the harder problem: it needs a server. Every existing app solved that by letting the server see everything, then selling what it saw. locate solves it by building the server blind. End-to-end encrypted. The relay forwards packets it cannot read.
The relay stores ciphertext. It reads nothing.
what we store: ciphertext. what we can read: nothing.
Why this is proof two.
zero proved the principle where no server is needed. locate proves it where one is. The industry position says real-time location sharing requires a company that can see the locations. It does not. It requires a company that can move them. Encryption happens on your phone, decryption on your family's phones, and the keys never touch us. locate is designed so that if our relay were ever seized, subpoenaed, or sold, its contents would be the same to the new owner as they are to us: noise.
- What shipsLive location sharing for the people you choose. Nothing public, nothing social, no contact upload.
- KeysGenerated and held on your devices only. We cannot reset them, read them, or hand them over.
- ProofA whitepaper documenting the cryptographic architecture publishes with the app. Verify, then trust.
The datasheet so far.
- Part
- LP-02
- Status
- In development · arriving September 2026
- Encryption
- End-to-end
- Relay visibility
- 0
- Accounts
- No identity beyond your keys
- Verify
- Whitepaper at launch
No waitlist, no email capture. When it exists, it will be here, and the code will speak for itself. Back to the protocol.