Private by design

Your identity isn't an open inbox.

Aura replaces the phone number and email address with a revocable Reach Contract — so people can only reach you the way, and for as long, you allow.

One identity, the same protections on Web, macOS, Linux, and Android.

Real, shipping builds — not a roadmap

Web macOS Linux Android
The problem with addresses

Open inbox vs. closed inbox.

A phone number or email address is a standing invitation: anyone who has it can reach you, forever, until you change it. Aura inverts that default.

Today

Open by default

  • Your number and address are open — anyone who has them can contact you indefinitely.
  • Blocking is reactive: the spam, scam, or unwanted message already reached you.
  • Support, marketing, and personal messages all land in the same inbox.
  • Revoking access usually means changing your number or address entirely.
With Aura

Closed by default

  • Your identity never becomes a public address — discovery returns an opaque handle, not a contact route.
  • Every sender needs an active Reach Contract before a single message is delivered.
  • Permissions are scoped by purpose — transactional, support, social, marketing stay distinct.
  • Revoke one relationship, or one device, without losing your identity.
One coherent workspace

Everything important, without the noise.

Aura brings communication and personal information together without turning your identity into a public address.

01

Communicate

Encrypted chat, mail-style messages, groups, voice, and video with relationship-level permissions.

02

Remember

Private notes, documents, media, scans, and secure records available across your devices.

03

Control

Decide who can contact you, why they can contact you, and when that permission ends.

Under the hood, in plain language

How a closed inbox actually works.

Four concepts carry the whole model. No protocol knowledge required to use it — but nothing here is hidden, either.

01

Identity

You create an Aura identity locally. It's a stable identity, not a phone number or an open inbox address.

02

Device

Each device you use gets its own signing and encryption keys. Lose one, revoke it — your identity stays intact.

03

Reach Contract

A sender requests permission. You grant a scoped, purpose-limited contract — with an expiry, if you want one.

04

Conversation

Only permitted senders reach your mailbox. Messages, calls, and files are encrypted in transit and stored as ciphertext the relay cannot read.

Side by side

Aura vs. the open address book.

Same goal — people reaching people — with a different default for who gets to initiate contact.

DimensionEmail / SMS / phone numberAura
Address modelOpen and guessable — once known, it can be used indefinitelyOpaque handle; a Reach Contract is required before delivery
Revoking a senderUsually means changing your number or addressRevoke that one contract — everything else keeps working
Purpose separationOne inbox for support, marketing, personal, and spamTransactional, support, social, and marketing stay distinct
Lost deviceThe number or account itself is exposedRevoke the device; your identity and other devices are unaffected
What the server seesVaries by provider — often full message contentEncrypted envelopes and delivery metadata. On Android and desktop, never plaintext — the hosted web app differs
A different foundation

Closed inbox by default.

Aura routes encrypted objects through revocable Reach Contracts instead of exposing a universal phone number or email address.

Endpoint encryption

On Android and desktop, private keys and plaintext stay on your own hardware. On the hosted web app they do not — we spell that out.

Independent devices

Revoke a lost device without abandoning your identity.

Visible purpose

Transactional, support, social, and marketing access remain distinct.

Intentional sharing

External delivery is explicit and clearly marked as a privacy downgrade.

Ready when you are

Close your inbox to everyone but the people you choose.

Open Aura in your browser, or install the native app for your platform — same identity, same protections, every time.