For communities that can't afford leaks

What happens inside,
stays inside.

A private communication platform where AI turns every conversation into actionable intelligence. Self-hosted on your infrastructure. Four independent transport layers ensure your messages get through even when everything else is jammed.

Download for AndroidSee the architecture
10
security levels
E2E
always on
4
transport layers
0
data on our servers
Built for
The rooms where real decisions happen.

WeAllHere is built for people whose conversations have real consequences. Where a leak means lost deals, broken trust, and legal exposure.

Investment clubs
Deal flow discussions, LP calls, portfolio reviews. Every call automatically transcribed with speaker separation. AI extracts action items. Reports distributed only to verified members.
Legal teams
Attorney-client privilege enforced by architecture, not policy. Messages encrypted end-to-end. Auto-delete ensures nothing persists beyond its purpose. Self-hosted means your jurisdiction, your rules.
Cross-border traders
Settlement negotiations across jurisdictions. Compliance-sensitive discussions about rates, volumes, counterparties. Encrypted channels that work when local internet is restricted.
Medical groups
Patient case discussions, board reviews, second opinions. HIPAA-grade privacy on your infrastructure. No third-party processor sees patient data. Audio deleted after transcription.
Business associations
Industry intelligence shared within trusted circles. Closed events with AI reports. Trust Score built on real interactions - verified ratings with mandatory context, not social media likes.
Family offices
Advisor calls about estate planning, tax strategy, succession. Conversations that must never surface in discovery. Panic PIN ensures instant destruction if a device is compromised.
Roadmap
Building in public.
Q1 2026
Communicate
E2E messenger, LiveKit HD calls, push notifications, federation, dark UI, invite system
Done
Q2 2026
Intelligence + Security
Call recording, diarization, AI reports, task extraction, Panic PIN, FLAG_SECURE, chat passwords
Now
Q3 2026
People + Reputation
Stories, Trust Score, mutual contacts, Open Calls, iOS
Q3
Q4 2026
Offline + Mesh
Wi-Fi Direct, SMS fallback, LoRa integration, solar relay nodes, Community Network
Q4
2027
Scale
iOS, Play Store, desktop, satellite API, enterprise, security audit
2027
What happens inside, stays inside.

Every call becomes a report. Every contact has reputation. Communication works even when everything is jammed.

Download for AndroidDeploy your server
10-level defense
We didn't add security.
We started with it.

Every layer designed assuming the server is compromised, the network is hostile, and the device may be seized.

E2E
Double Ratchet + Megolm
Olm for DMs with unique per-message keys. Megolm for groups with per-session ratcheting. Server stores only encrypted blobs it cannot decrypt. Open source, independently audited.
PIN
Panic PIN
Separate unlock code triggers emergency wipe. Cryptographic keys overwritten with random data. Database destroyed. Cached media purged. Visually identical to normal unlock - observer cannot tell the difference.
24h
Messages that vanish
Auto-delete per chat on schedule. Self-destruct per message after reading. View-once in FLAG_SECURE viewer that blocks screenshots, screen recording, and app switcher previews.
VPS
Your jurisdiction
Run on your hardware in your chosen country. LUKS full disk encryption. Docker isolation prevents lateral movement. No cloud dependency. Your infrastructure, your legal framework.
///
Zero traces
Audio deleted after transcription. IPs not stored beyond active session. No analytics SDK, no telemetry. Push notifications deliver only opaque notification ID - content never touches Apple or Google.
AI
Anti-AI protection
Credential stuffing defense. Metadata padding defeats traffic analysis. Prompt injection sandbox protects built-in assistant. All AI processing runs on self-hosted models with zero external calls.
Threat model
What each attacker actually gets.
Attacker hasCan seeCannot see
Full server database dumpEncrypted blobs, room IDs, timestampsMessage content, media, keys, passwords
Stolen phone (locked)Nothing without PIN or biometricAll data, all keys, all messages
Server administratorMetadata, user list, room membershipE2E encrypted content, private keys
ISP or network operatorEncrypted TLS traffic to server IPContent, metadata, who talks to whom
Compromised AI providerTranscription text if external APINothing if self-hosted AI configured
Emergency protocols
Three seconds to zero.

When a device is about to be compromised, speed matters. WeAllHere provides multiple emergency mechanisms that work under pressure.

Panic PIN - full wipe
Set a separate PIN code that looks and feels like your normal unlock. When entered, it triggers irreversible destruction: all encryption keys overwritten with cryptographically random data, local SQLite database dropped and overwritten, cached images and files securely deleted, session tokens invalidated on server. The app opens to a clean state as if freshly installed. An observer watching over your shoulder sees a normal unlock followed by a normal-looking empty app. There is no way to distinguish a panic wipe from a fresh installation.
Selective wipe
Choose specific chats or groups to include in the panic wipe while keeping others intact. Useful when only certain conversations are sensitive. Configure in Settings: select which rooms are destroyed on panic entry. The rest survive with full history. This allows you to maintain a plausible normal-looking app with some chats visible while the sensitive ones are irrecoverably destroyed.
Chat passwords
Individual chats can be locked with a separate PIN. Even if someone gets into the app, password-protected conversations remain encrypted behind an additional layer. The chat appears in the list but content is hidden until the correct PIN is entered.
Auto-delete messages
Set a timer per chat: 24 hours, 7 days, or 30 days. Messages are deleted on all devices after the period expires. Server-enforced - even if a participant's device is offline, messages are purged from the server on schedule.
View-once media
Send photos or files that can be viewed exactly once. Opens in a secure viewer with FLAG_SECURE enabled: screenshots blocked, screen recording blocked, app switcher shows blank. After viewing, the media is deleted from both devices and the server. No recovery possible.
Platform
Communication in. Intelligence out.

Five integrated modules replacing Telegram + Zoom + Otter + Notion + LinkedIn for professional communities that need privacy.

01
Communicate
E2E encrypted messaging with threaded group conversations. HD voice and video via LiveKit. File sharing with on-device encryption. Disappearing messages, view-once media, per-chat passwords.
02
Intelligence
Calls recorded, transcribed with speaker diarization, analyzed by AI. Summaries, decisions, and tasks extracted automatically. Your AI provider or self-hosted. Audio deleted after processing.
03
Reputation
Trust Score from real interactions. Anonymous 1-5 star ratings require mandatory context and 20+ character comment. Visible after 3+ independent ratings. No gaming, no inflation.
04
Discovery
Private feed of channels and posts. Events Hub for closed broadcasts, open seminars, paid masterclasses. Intent Network - post what you need, receive private responses.
05
Hub
Command center aggregating tasks from calls and chats. Calendar integration with Google and Yandex. Weekly insights on communication patterns and contacts going silent.
Open Calls
Invite anyone. No account needed.

External participants join via browser link. Full WebRTC quality. You get the complete AI report.

One link, any channel
Generate a call link, share via email, SMS, WhatsApp. They click, browser opens, they're in. No app download, no account, no friction.
Full AI pipeline
Recording, diarization, transcription, and analysis work identically for open calls. The AI report is generated on your server, accessible only to you.
Every call is a demo
External participants experience the quality, see the follow-up report, and realize there was zero setup on their end. Open Calls is the primary growth engine.
Events Hub
Broadcasts for your circle.
CLOSED
Invite-only broadcasts
Board meetings, LP updates, privileged sessions. Only invited participants join. Recording E2E encrypted. AI report to attendees only.
OPEN
Community events
Industry panels, expert talks. Anyone with link can register. Grow your community while controlling participation.
PAID
Monetized sessions
Masterclasses, training, premium content. Built-in ticketing. Attendees get AI summary and recording access.
Social layer
Stories. Channels. Intents.

Private social features designed for professional communities. Not public broadcasting - controlled sharing within your trusted network.

Stories
24-hour ephemeral updates visible only to your contacts. Share project milestones, travel updates, or quick thoughts without cluttering chat. Stories support text, images, and short video. Privacy controls let you choose exactly who sees each story - all contacts, specific groups, or custom lists. Auto-delete after 24 hours is enforced server-side.
Channels
One-to-many broadcasting within your community. Create public channels for announcements or private channels for restricted content. Subscribers receive posts in their Discover feed. Channels support rich media, threaded comments, and reaction-based engagement. Channel owners control who can subscribe and who can comment.
Intent Network
Post what you're looking for or what you can offer. "Looking for: tax advisor with crypto experience in Dubai." "Offering: warehouse space in Rotterdam, 500m2, available Q3." Responses come as private messages, not public comments. The intent stays visible in the network feed. Matches happen organically through the community without exposing either party publicly until they choose to connect.
Trust Score
Reputation built on real interactions.

Not followers, not endorsements, not social proof theater. Trust Score is built from verified professional interactions where both parties have skin in the game.

How ratings work
After any meaningful interaction - a meeting, a deal, a project collaboration - either party can leave a 1-5 star rating. Every rating requires selecting a situation type (meeting, negotiation, delivery, recommendation, referral) and writing a minimum 20-character comment explaining the score. No drive-by ratings. No empty stars. Every score carries context.
When scores become visible
A user's Trust Score appears on their profile only after receiving 3 or more independent ratings. This prevents gaming with a single fake positive review. The score shown is a weighted average where recent ratings carry more weight than older ones. Individual ratings are anonymous - you see the aggregate, not who rated what.
5
Situation types
Meeting, Negotiation, Project delivery, Recommendation, Referral. Each type gives context to the rating. A 4-star in "Negotiation" means something different than 4-star in "Referral".
3+
Minimum to display
Three independent ratings from three different users before the score appears. Prevents manipulation. New users build reputation through real work, not fake reviews.
W
Weighted recency
Recent ratings count more. A great track record two years ago matters less than consistent quality this quarter. Score reflects current reliability, not historical peak.
Intelligence
"What did we agree on?" Never again.

Every conversation produces structured output. Not just a transcript - a report with speaker attribution, decisions, action items with owners, and deadlines.

01
Record
One tap or automatic. In-app calls, group conferences, browser-based Open Calls.
02
Transcribe
Whisper on your server. Speaker diarization. 50+ languages with auto-detection.
03
Analyze
Your AI model: executive summary, decisions, tasks with owners and deadlines.
04
Execute
Tasks flow to Hub. Report shareable within community. Audio permanently deleted.
Call Recording
Every word. Every speaker. Separated.

Not a flat audio dump. Structured recording with speaker identification, timestamps, and automatic segmentation into logical blocks.

REC
One-tap or automatic
Start recording manually during any call, or configure auto-record for all calls in a specific room. Works for 1-on-1 calls, group conferences, and Open Calls with browser participants. Recording happens server-side - no impact on call quality or device performance.
WHO
Speaker diarization
AI identifies individual speakers in the recording and labels each segment. The transcript shows who said what, not a monolithic wall of text. Works reliably with 2-8 speakers. Each speaker is matched to their WeAllHere profile when available.
DEL
Audio destroyed after processing
The raw audio file is permanently deleted from the server immediately after transcription completes. Only the text transcript and AI-generated report persist. No audio backup, no recovery possible. This is by design - audio is a liability, text is intelligence.
What the AI report contains
Executive summary (3-5 sentences capturing the essence of the conversation). Key decisions made during the call with exact quotes and speaker attribution. Action items extracted as tasks with assigned owners and deadlines where mentioned. Open questions that were raised but not resolved. Sentiment flags for moments of disagreement or concern. All of this generated in under 60 seconds after the call ends.
AI providers
Your model. Your rules.
Cloud API
Connect OpenAI, Anthropic Claude, or DeepSeek with your API key. Switch providers anytime. Your key, your billing.
Best for: maximum AI quality, minimal setup
Custom endpoint
Any OpenAI-compatible API. Run Llama, Mistral, Qwen on your GPU infrastructure. Full control over model and data residency.
Best for: existing ML infrastructure
Self-hosted Docker
Complete AI stack in Docker containers. Whisper + LLM on the same server. Zero external API calls. No data ever leaves your infrastructure.
Best for: maximum privacy, air-gapped, regulated industries
Chat AI
AI inside every conversation.
Summarize long threads
Missed 200 messages? One tap generates concise summary of key points, decisions, and things needing your attention.
Extract tasks from chat
AI identifies commitments and deadlines. "I'll send the contract by Friday" becomes a task in Hub with deadline and owner.
Weekly digest
AI analyzes all conversations, calls, and tasks. Identifies overloaded team members, slipping deadlines, relationships needing attention.
Unstoppable
Can't be blocked. Can't be jammed.
Can't be stopped.

When governments shut down internet, when jammers block cellular frequencies, when infrastructure fails - WeAllHere keeps working. Four independent transport layers with automatic failover.

01
Internet
Standard operation. Full functionality through Matrix protocol. Text, media, calls, video, AI.
ACTIVE BY DEFAULT
02
Wi-Fi Direct
Phone-to-phone mesh. No router, no internet. Auto peer discovery within 100 meters. Text and compressed images.
AUTO WHEN OFFLINE
03
SMS Encrypted
Messages encrypted with E2E keys, split into SMS blocks. Carrier sees random characters. Transparent to user.
WHEN NO WI-FI PEERS
04
LoRa Radio
868MHz ISM band. 1-10km per hop. Mesh relay through other devices. Works when all conventional communication is jammed.
LAST RESORT
Real scenarios
How it works in practice.
Underground parking. No signal.
You descend into a parking garage. Cellular drops. WeAllHere detects the loss within 3 seconds and activates Wi-Fi Direct. Your colleague's phone does the same. Devices discover each other automatically. You type "I'm on B2" - arrives instantly through direct P2P. Only change: a small icon next to the input field. When you drive out, internet returns, all messages sync to server. Timestamps preserved. Read receipts updated.
Rural area. No internet, weak cellular.
Mobile internet unusable but cellular signal exists for SMS. You send "Buy milk on the way." WeAllHere encrypts with E2E keys, encodes as base64, splits into SMS blocks. Partner's app intercepts, reassembles, decrypts. She sees the message in normal chat. Neither notices the transport switch.
Protest zone. Internet and cellular jammed.
Authorities deployed broadband jammers. Conventional messaging impossible. But LoRa modules operate on 868MHz - a frequency standard jammers don't target. Messages hop between devices. A chain of 7-8 relays covers an entire city. More participants in mesh = more resilient the network.
Transport comparison
What works where.
TransportTextPhotosFilesCallsRangeRequires
InternetYesYesYesYesGlobalInternet
Wi-Fi DirectYesCompressedNoNo100mNothing extra
SMS EncryptedYesNoNoNoCarrierCellular signal
LoRa Radio228 bytesNoNoNo1-10kmLoRa module
Offline queue
When no transport available, messages stored locally with original timestamps. The moment any channel appears, queue drains automatically. Messages sent through alternative transports re-sync via internet for server consistency.
Mesh Network
Every user is a tower.

A compact radio module connects to your phone via Bluetooth. Solar relay nodes on rooftops extend coverage. Every device is a relay point. More people = more resilient network.

CARRY
LoRa Module
Matchbox-sized device clipped to keychain or pocket. Pairs via Bluetooth. Transmits on 868MHz ISM band - license-free. Battery lasts weeks to months. Compatible with any Android or iOS device.
Heltec T114 / LILYGO T-Beam / Heltec LoRa V3
DEPLOY
Solar Relay Node
Weatherproof unit with integrated solar panel and battery. Mount on rooftop, balcony, or exterior wall. Charges during daylight, operates 24/7. IP67 rated. Designed to run years without maintenance.
RAK WisMesh Repeater / Atlavox Beacon / SenseCAP P1
EMERGENCY
Portable Cell Tower
Self-contained kit creating a private cellular network. Phones connect using standard built-in antenna. Based on open-source srsRAN on Raspberry Pi with software-defined radio. Deploys in five minutes from ruggedized case.
Raspberry Pi 4 + LimeSDR Mini 2.0 + srsRAN
Coverage
Density creates resilience.
5 nodes per km2
Entry-level. 0.1% adoption. Basic connectivity with potential gaps. Messages may need multiple hops and experience delays.
Achievable with early adopter community
50 nodes per km2
Reliable. 1% adoption. Messages consistently find paths. Gaps rare. Delivery under 30 seconds even for multi-hop routes.
Active community + relay nodes
200+ nodes per km2
Full redundancy. Multiple paths for every message. Network routes around damage automatically. Practically indestructible.
City-wide Community Network Program
Why standard jammers don't affect LoRa
Military and law enforcement jammers target cellular bands (700-2600 MHz), Wi-Fi (2.4/5 GHz), GPS (1575 MHz). LoRa operates on 868 MHz ISM band - used by IoT sensors, weather stations, agricultural equipment. Too niche for standard jamming profiles. Mesh topology routes messages around any localized jamming.
Community
Community Network Program.

Infrastructure built by the community, for the community. WeAllHere provides software and coordination. Users provide the rooftops.

Host a relay node
Install a solar node on your rooftop or balcony. Autonomous - solar charged, weatherproof, maintenance-free. Relays messages for everyone in range, extending mesh coverage and reliability.
What you get
"Network Host" badge on your WeAllHere profile. Priority access to new features. Your node on the live coverage map. The more uptime your node maintains, the higher your host reputation.
Self-host
Your server. Ten minutes.

Complete WeAllHere stack as Docker containers. Messenger, calls, AI pipeline, admin panel. No external dependencies.

curl -s https://weallhere.org/install.sh | bash
1
Get any VPS with 4GB RAM
2
Point your domain to it
3
Run the install script
4
You own your communication
Included
Full stack. Zero dependencies.
Matrix Synapse homeserver
Federation-capable messaging server with E2E encryption. Users, rooms, keys, sync. Proven at scale by millions of Matrix users.
LiveKit media server
WebRTC voice and video with server-side recording. Group conferences, screen sharing, browser guest access.
AI processing pipeline
Whisper for speech-to-text, your LLM for analysis. Speaker diarization, task extraction, reports. All in Docker on your hardware.
Admin panel
Web interface for user management, moderation, invite tokens, system monitoring at admin.yourdomain.com.
Automatic TLS
Let's Encrypt certificates via Traefik reverse proxy. HTTPS everywhere with zero manual certificate management.