We build apps that do not ask you to trust them.

Trust is not required: what the app does with your data is something you can check yourself. It stays on your device, encrypted, and you can export it whenever you want in a format that opens without us.

Development

One data model, three ways of living in it. Every system has its own conventions and integrations, and a shortcut borrowed from another one shows immediately.

iPhone · iPad

iOS and iPadOS

The primary platform. Health, Face ID, iCloud and the system conventions. Not a port: the place where the app is born.

Mac · Apple Watch

macOS and watchOS

Same identity, different ergonomics. On Mac what counts is windows, keyboard and files; on the wrist it is one gesture and the battery.

Android · Wear OS

Android

Second target, handled by its own rules: Health Connect, Keystore, the Back button. The apps reach Google Play as soon as they hold up in real use.

How we work

These are not slogans. They are technical choices that sit inside the apps and show in how they behave.

No account, no server

If an app does not need your data to work, it should not ask for it. No sign-up and no backend piling things up: the device is enough.

Encrypted at rest, for real

Database encrypted on the device, key in the system keychain, backups protected. "Encrypted" is a property you verify with a test, not a marketing line.

The data is yours and you can take it away

Full export in open formats, backups you can read and keep wherever you like. Staying should be a choice, not the result of lock-in.

What we declare is what the code does

The privacy policy describes the real architecture, not a reassuring version of it. When the two diverge, the bug is in the policy.

What we are building

Nivela

Blood glucose diary. Encrypted database on the device, iCloud backups protected by a key that stays in the keychain, Health integration. Shipping on iPhone, iPad and Apple Watch, then on Android and Wear OS smartwatches with Health Connect.

Coming to the App Store

Recordago

Voice recorder built so a recording survives a phone call, a crash and a relaunch. Audio encrypted on the device. Shipping on iPhone and Apple Watch, then on Android and Wear OS smartwatches.

In development

Get in touch

Questions, collaborations, bug reports: write. The person who wrote the code answers.

[email protected] Nivela support Recordago support

LupiFoundry is the name we publish our software under. There is no company behind it, and the full details of the data controller are in the privacy policies, where the GDPR requires them to be.