Sunrise


We’re all tired of tech companies spying on us. Harvesting us for clicks. Selling our data to who knows who. Training AI on us. We’re tired of data breaches at companies that are irresponsible with our personal info. I’m tired of it.

This weekend, I implemented end-to-end encryption in the Flowit discussions feature, including text and images. In English, that means that the Flowit app will launch with a level of privacy and security well above the vast majority of apps on the market. When you use Flowit to send messages, they are encrypted with a secret your phone creates that is never stored on Flowit servers. The upshot of this is that even with super-admin access, myself and other Flowit developers are not able to read your messages and view your photos even if we wanted to. Nor could any potential hackers. Messages and files in the database look like gibberish, and it can’t be cracked. Gotta love math.

While the Flowit security protocol is highly effective, it is basic, and it is not yet at the level of an app like Signal. Signal does some fancy things to be resistant even to the most sophisticated and well-resourced state actors trying to break into your phone itself. So if the Chinese government is after your Flowit photos, I cannot guarantee they’ll never find a way. But you might have bigger problems in that case.

I could geek out more about how the encryption works, but I’ll save it for a technical document at some point. Eventually, I’d like to have the code audited so no one has to take my word for it. In due time.

More on the way soon. We don’t have a launch date yet, but we’re making fast progress.