Tuijo. For two.
A private chat that lives only on your two phones.
iPhone and Android · English, Italian, Spanish, Catalan
A private chat that lives only on your two phones.
iPhone and Android · English, Italian, Spanish, Catalan
Each of you shows their code and scans the other's. No email, no phone number, no password: from then on it is just the two of you.
Friday's dinner, the train to book, flowers for her mother: a reminder with date and time shows up in both chats, and an hour before it alerts you both.
The photos, videos, links and files you have sent each other are gathered month by month. No more scrolling back to find that photo from August.
The handset sits inside the chat: one tap and the call starts, peer-to-peer, straight from one phone to the other.
One tap and the other sees how far you are and which way to go: an arrow and the distance, updated live. Sharing lasts one hour or eight, then switches itself off, and the coordinates travel encrypted.
The Tuijo widget lives on your Home Screen: it shows the next reminder from the moment its alert starts, how many new messages are waiting (never their text) and a handset to call each other with one tap. On iPhone and Android.
It is not a marketing promise: it is how the app is built.
The private key is created on the device when you pair your phones, and stays there. The only copy that leaves is the one for recovery, encrypted so that only your partner can open it.
Every message uses a single-use AES-256 key, which is itself sealed with the public key of both devices.
Messages, attachments, location and the copy of the certificate for recovery: on the server it is all unreadable, and we do not have the keys to open it.
RSA-2048 + AES-256 · no account and no phone number · zero-knowledge
No files to export, no password to remember: Tuijo's backup is the other person.
New phone? It shows a QR code, your partner scans it and hands back the chat's certificate. Every message returns on its own.
Still have your previous phone? Do it yourself: tap Transfer, scan the new phone's QR and the chat moves over.
Uninstalled and reinstalled the app on the same phone? The keys are kept by the system and restored without you doing anything.
The QR is valid for ten minutes · the certificate travels encrypted only for the phone that asked for it · we cannot open it
On iPhone through the App Store and on Android through Google Play. The interface is available in English, Italian, Spanish and Catalan.
No. There is no sign-up: the two phones recognise each other by exchanging public keys through a QR code, and from then on the conversation exists only between them.
Coordinates are encrypted with a key dedicated to the session, which lasts one or eight hours and then expires. No readable location is left on the server.
No, and that is by design: one device pairs with one other device. There are no groups and no address book.
Yes. On the new phone open Settings → Recover messages and choose where from: your partner's phone, or your own old phone. The new phone shows a QR code valid for ten minutes, the other one scans it from Settings → Help your partner (or Transfer), and the certificate arrives encrypted for that device only: the chat rebuilds itself.
Settings → Delete Messages, at three levels: from this phone only, from your partner's phone only, or from both phones and the server as well. The first two leave the chat on the server, so pairing again brings it back; the last one cannot be undone.
Many answers are already in the Questions: recovering the chat, deleting messages, location. To see which data we handle, there is the privacy policy. If you cannot find what you are looking for, write to us.
info@tuijo.app