How Geo protects your privacy.

Geo is built so you can go out and join in without leaving a trail. Here is what happens to your data — and what doesn’t.

Privacy by architecture, not by promise.

Geo is peer-to-peer. Content lives on participants’ devices and propagates directly between peers — there is no Geo server storing your events or who attended them.

Your identity is a device-generated keypair and a user-chosen alias. The alias gossips across the network so people see a stable name; the keys never leave your device. Because identity is cryptographic, we cannot recover lost keys for you.

We aggregate over individuals: the app shows "5 people are viewing" — never who.

How it works

  1. 1

    Be there.

    An event is geofenced. You attend by being physically present — not by tapping "RSVP" from your couch.

  2. 2

    Discover by cell.

    Geo groups the world into H3 cells. You subscribe to your cells and gossip events with neighbors — directly, without a server.

  3. 3

    Move freely.

    Your alias and reputation travel with you across cities. Lose your phone, lose your keys — by design.

Built around a hard wall.

Two modes share the same app — and never share their data.

Public events

Discover what is happening around you under a self-chosen alias. Visibility is aggregate-only — counts, not identities. There is no central server storing your social graph.

Private Spaces

Organizations get their own invite-only space relayed by a Geo-managed super-peer. Members and events stay inside the org namespace. Public anonymity rules never silently apply.

Hard wall: nothing from a private space ever surfaces in public views, and public anonymity rules never silently apply inside a private space. Identity, arrival, departure, and in-space relationships are never merged into the public graph.