Where is a cross-platform, end-to-end encrypted realtime location sharing app.
Where is designed so the server learns as little as possible:
* No accounts. Identity is a device-scoped ephemeral key pair — no usernames, email addresses, or persistent IDs.
* End-to-end encrypted by default. Location payloads are encrypted with a Double Ratchet protocol before they leave the device. The server routes opaque ciphertext and cannot read coordinates.
* No social graph. Routing uses pairwise anonymous tokens; the server cannot reconstruct who is sharing with whom.
* Forward secrecy. Automated keepalives advance the ratchet even when only one party is sharing, so past sessions cannot be decrypted if a key is later compromised.
This build uses MapLibre and Android's built-in location APIs instead of Google Maps and Play Services. Map tiles are fetched from tiles.openfreemap.org, which sees the map area you view (but not your identity or shared locations).
