Social. No Corporation.
No Ads.
HIY connects people directly, device to device — encrypted, with no big platform standing in between, fighting for your attention.
"HIY" is pronounced like "hi" — a nod to hi/hello.
Three principles, no compromises
HIY uses the computing power and storage of its users' own smartphones — server infrastructure is kept to a minimum instead of growing into a central data center.
Peer-to-peer first
Posts, photos, and interactions are exchanged encrypted directly between devices. Lightweight relays only help with delivery when recipients are offline — no corporate data center collecting or owning your data.
On-device AI Shield
Detection of AI-generated content, bot spam, and deepfakes runs 100 % locally on the recipient's device — nothing leaves your phone for the check.
Real identity
Content is cryptographically signed via hardware (Android Keystore) when created. Full data ownership, no fake accounts.
Same Wi-Fi stays on the same Wi-Fi.
Choose "Local" as your reach, and your post leaves the device only over a direct connection on the local network — it never touches the internet, never a relay server. A conversation on the same Wi-Fi stays technically exactly where it happens.
No likes. No central ranking.
What you see is entirely up to you — with local relevance lenses and a resonance reach you set for every post.
5 local relevance lenses
In the "Everyone" feed, you decide what gets dialed back — purely local, nothing is ever counted or stored anywhere.
Resonance reach instead of a like button
You decide, per post, how far it can spread through the mesh at most — no algorithm decides for you.
Among friends, the journey gets cheaper — with no likes or central ranking at all.
How a post travels through the mesh
Every hop increases the counter by 1. Once it reaches the chosen budget, forwarding stops — no server keeping count.
Preset "Medium" = reachBudget 8. For friends of the author, the counter actually drops by 1 on every hop (a discount of 2 against a hop cost of 1) instead of rising — the post travels noticeably further because of them, never counted, never reported.
One comment. Short and meant.
Every post gets one comment — 5 to 20 characters, no more. No room for endless arguments, just one thought that actually lands. With HIY+, it's three comments instead of one.
The reasoning: a single, short comment forces you to pick what's actually worth saying — in line with the rest of HIY: no likes, no central ranking, no incentive to just keep typing.
More room for those who want more
HIY stays free and ad-free in its base version. HIY+ is an optional upgrade — no core feature sits behind a paywall.
Three comments instead of one
Normally, every post gets one comment. With HIY+, it's three — more room for you, without changing the principle: still short, still meant.
High resonance reach
The "Large" resonance-reach preset is reserved for HIY+ — if you want a post to travel noticeably further, you choose that deliberately, instead of it applying to everyone automatically.
Moderation that hides nothing
No silent deletions, no black-box bans — and your circle of friends only forms when both sides agree.
Report without deleting
A post never disappears over a handful of arbitrary reports. Reports from real, mutually confirmed friends count in full immediately; reports from strangers only after a waiting period and with less weight — and the further a post has already spread (hops, comments), the more of them it takes. Only then does it get replaced with one of eight random quips — e.g. "Poof! 🎩✨ And it's gone." Every hidden report counts as a strike against the author; after three strikes, a posting/commenting ban follows (reading still works), with the duration doubling each time: 1, 2, 4, 8, 16 days.
Friendship by mutual consent
A friend code never grants automatic access — it only sends a request. You're only friends once both sides accept.
Signed reports, honest warning
Reports are cryptographically signed just like posts and can be traced to a real device identity. If a different identity later shows up under the same name, HIY displays a visible warning instead of silently treating it as the same person.
Removed posts never just vanish without a trace: every removal is logged with a timestamp and a reason in an audit log — modeled on the statement-of-reasons requirement in Article 17 of the EU Digital Services Act (DSA). A complete DSA process (including notifying the affected person and a right to appeal) isn't there yet, but it's a first building block in that direction.
Cryptographically secured, not just promised
Every claim here can be technically verified — offline, on your own device, without having to trust anyone.
Hardware-signed posts
Every post, comment, and report carries an ECDSA signature from the Android Keystore (where available: the StrongBox hardware chip). The private key never leaves your device — recipients verify offline that nothing was altered afterward.
Cryptographically proven verification
Anyone signing in via ortino.AUTH with a confirmed email can bind their device via proof-of-possession (an open standard, RFC 7800). No server you have to trust — every device checks this itself, offline, against a public key.
Photos without location
Photos are automatically recompressed before sharing — this fully removes EXIF metadata like GPS coordinates and camera model. A deliberately verified side effect, not a coincidence.
Encrypted storage
Your local database is encrypted with SQLCipher (AES-256) — the key itself is, once again, hardware-bound in the Android Keystore.
Continuously hardened
Went through a dedicated security pass ahead of the beta: identity spoofing on device/account switches, forged friend requests, comments without trust signals — all found and closed before real users could ever run into them.
In active development
HIY is being built openly, step by step. Here's where things stand.
P2P engine (text, LAN)
Peer discovery, gossip forwarding, live feed with no server.
On-device text shield
Local, explainable AI detection with an adjustable sensitivity slider.
ortino.AUTH
OAuth2 + PKCE, real names & avatars, auto-login via hardware keystore.
Self-regulation
Trust-weighted, reach-dependent report threshold, transparent removal quips instead of silent censorship, strikes with a doubling ban duration.
Photos in the feed
Attach, compress, P2P transfer — end-to-end confirmed.
Signed reports & identity warning
Report signing like posts, plus a warning on name/identity changes.
iOS
Native SwiftUI port, wire-compatible with the Android client — tested on real devices. Not publicly released yet.
HIY+ reach limit
High resonance reach (the "Large" preset) will eventually require HIY+ — prevents reach-farming without limiting basic use.
End-to-end encryption for friends
Content visible to "Friends only" gets its own device-bound encryption key (separate from the signing key) — so no one but the recipients can read it, not even a relay operator.
Questions? Search or just ask.
Everything about login, posting, security and more — searchable here, or directly in the chat bottom-right.
No results — try asking the chat bottom-right instead.