Your contacts — and the Signal-encrypted pairings behind them — live only on your phone. Keeping them there is what makes your contact graph yours alone: no server, and no browser, ever holds it.

Binders are encrypted document collections stored on your phone (and pinned to IPFS in encrypted form). The keys never leave the device, so the web can't open them — by design, not by omission.

Chats stay on your phone for end-to-end security: Signal and MLS keys live in the phone's secure enclave, and this browser deliberately never receives them. Web messaging, if it ever ships, will be its own carefully-scoped device — never a copy of your identity.

Vouches are subject-held credentials — you carry them on your phone and present them selectively. There is intentionally no public on-chain ledger of who vouched for whom.

Coming soon. Things will surface the broader object graph beyond your spaces — the same placeholder you see on the phone for now.

Coming soon — and phone-only by design. The Vault is your phone's encrypted store (recovery material, eID-derived data, device keys); nothing in it can ever appear in a browser. The same placeholder you see on the phone for now.