Our commitments

    Five promises, and what each one costs us.

    Anyone can say they're different. These are the specific decisions we made, the mechanisms that enforce them, and the tradeoffs we accepted to keep them. If we ever break one of these, it should be obvious — and you should hold us to it.

    Commitment 01

    No AI-generated content. Ever.

    If it's in your feed, a human made it.

    Most platforms are quietly filling with synthetic posts, synthetic replies, and synthetic people. We think that destroys the only thing a social network is actually for: knowing that on the other side of the screen there's someone real.

    So AI cannot create anything on LinkConnect. There is no AI caption writer, no AI image or video generator, no AI-suggested replies, no AI companions, and no synthetic accounts. We won't add them later as a growth feature — this is a product boundary, not a launch positioning.

    We do use machine learning in two narrow places, and we name them openly: safety (detecting AI-generated uploads, manipulated media, spam and bot networks, and guideline violations) and accessibility (optional on-device alt-text, and translation you explicitly request). Neither creates content. Neither ranks your feed.

    How it's enforced

    • Six-layer authenticity scoring on uploads: capture metadata, EXIF integrity, generative-image detection, behavioural signals, reporting, and human review.
    • Content scored as AI-generated is blocked from the feed — with an appeal path, because false positives are real.
    • A 'Human Content Only' setting exists app-wide, and it's the default.
    • Photo editing uses manual sliders and human-designed presets — no one-tap AI enhancement.

    The tradeoff

    This makes us slower and less impressive on paper. We ship fewer 'magic' features than competitors, and some legitimate photos occasionally get flagged. We accept both.

    Commitment 02

    No engagement-maximizing algorithms.

    Your feed is chronological, from people you chose. Full stop.

    An engagement-optimized feed isn't a neutral tool — it's an incentive machine. It learns that outrage holds you longer than joy, that comparison holds you longer than contentment, and it gives you more of what holds you. The people running it usually didn't decide that; the optimizer did.

    The Connect Feed has no optimizer. Posts appear newest-first from the accounts you follow. There is no engagement score, no dwell-time weighting, no 'suggested for you' interleaving, no re-ordering based on what keeps you scrolling, and no way to pay for placement.

    Discovery still exists, because finding new people matters — it just lives in its own tab that you open on purpose. And we publish how it ranks: recency, engagement velocity, and growth velocity relative to account size. The same math applies to everyone, and nothing in Discover ever leaks back into your feed's order.

    How it's enforced

    • Chronological, following-only Connect Feed — enforced in code, not a toggle we can quietly flip.
    • Rising Creators ranks by relative growth, not raw follower counts, with a boost for fresh voices and blocks on 24-hour manipulation spikes.
    • Promoted business content is capped at a few clearly labelled cards a day and never enters the Connect Feed.
    • Business and promoted accounts are filtered out of personal feeds unless you follow them.

    The tradeoff

    You will occasionally have a boring feed. That's what a real week with your real friends looks like, and we'd rather show you that than manufacture excitement.

    Commitment 03

    Privacy that costs us something.

    We built systems that make your data unavailable to us, not just unshared.

    Privacy policies are easy to write. The honest test is whether a company built infrastructure that removes its own access — because policies change when incentives do, and encryption doesn't.

    LinkChat is end-to-end encrypted with RSA-OAEP key exchange and AES-256-GCM message encryption. Your private key is generated on your device and stored there in IndexedDB. It never touches our servers. We hold ciphertext, which means we cannot read your messages and cannot produce them if we're asked to.

    Location follows the same principle. Precision has a real 'off' state that's enforced everywhere — no location badges, no public Photo Trails, no coordinates in your uploads. Neighborhood works from an approximate area rather than your exact position, Explore mode lets you browse other cities without sharing anything, and live location in chat is manual, per-conversation, and time-limited. There is no background tracking.

    And we don't sell data. Not to advertisers, not to brokers, not to 'partners'. Business revenue means we don't have to.

    How it's enforced

    • EXIF and GPS metadata stripped from uploads by default.
    • Contact matching hashes numbers on-device with a platform pepper; non-matches are discarded immediately.
    • No presence system at all — no green dots, no 'Active now', no 'Last seen'. We deleted the table.
    • EU data stored in EU regions; GDPR and US state privacy requests honored with 30-day erasure.
    • Full data export, and 90-day soft-delete before permanent cascading erasure.
    • Blocking creates a decoy private state, so the blocked person can't confirm they were blocked.

    The tradeoff

    Real end-to-end encryption means lost devices can mean lost messages, and we can't recover them for you. We think that's the right side of the tradeoff.

    Commitment 04

    Wellbeing as design decisions, not a settings screen.

    We removed the mechanics that make people feel bad, instead of adding a timer.

    Most 'digital wellbeing' features are an apology for the rest of the product: a usage dashboard bolted onto an app engineered to be hard to put down. We'd rather not build the compulsion in the first place.

    There are no public like counts to chase, no streaks that punish you for taking a day off, no 'someone viewed your profile' bait, and no read-receipt pressure. Reactions are temperature-based — Hot, Warm, Cool, Cold, Electric — describing how something made you feel, with nothing public to farm.

    LinkClips ends on purpose. Clips cap at three minutes, anything you've already watched past halfway is excluded from your queue, and when you reach the bottom you get a 'You're caught up' screen instead of an algorithmic refill. Notifications are batched into windows with Quiet Hours and a catch-up digest, rather than fired the instant something happens.

    And you shouldn't have to be one person for everyone. Personas let you separate parts of your life on one account, Close Links keeps posts to a private group of up to 50, and Intimate and Anonymous content never enters Discovery.

    How it's enforced

    • No public like counts, no streaks, no profile-view counters, no presence indicators.
    • 'You're caught up' end state in LinkClips; seen clips excluded from the queue.
    • Batched push notifications (15–120 minute windows), Quiet Hours, and digests.
    • Muted words (up to 100), sensitive-content blurring with manual reveal, and restrict-without-blocking.
    • WCAG 2.1 AA defaults with automatic Reduce Motion detection.

    The tradeoff

    Every one of these choices lowers time-in-app. That metric is not one we're trying to win.

    Commitment 05

    Humans decide. Machines only triage.

    A person reviews the decisions that affect your account.

    Automated moderation at scale is cheap and consistently wrong in the ways that matter most — context, sarcasm, culture, and the difference between a threat and a joke between friends. We use automation to sort the queue, never to close the case.

    Reports are prioritized across more than ten categories, with safety-of-life issues jumping to the front. Content that reaches ten independent reports is automatically held pending human review, and a three-report throttle stops one person from weaponizing reporting against someone they dislike. Removals, suspensions, and appeals are all made by a person.

    Moderators are held to the same standard as everyone else. Admin operator accounts cannot post socially, moderation actions are attributed to the platform rather than a named staff member, every action is written to an audit log, and any report touching an admin's own content or account is automatically routed to someone else.

    Appeals are real. Moderation removals, automated bot-detection actions, and wrongly flagged authenticity checks can all be appealed to a reviewer who wasn't involved in the original decision.

    How it's enforced

    • Prioritized human review queue with severity-based routing and automatic holds at 10 reports.
    • Conflict-of-interest routing enforced by database triggers, not policy memos.
    • Full audit logging on every moderation action.
    • Public Community Guidelines and AI Policy that describe what gets removed and why.
    • Support tickets carry a readable reference (LC-YYYY-XXXX) so nothing disappears into a void.

    The tradeoff

    Human review is slower and more expensive than an automated ban hammer. Response times will sometimes reflect that, and we'd rather be slow than wrong.

    Commitment 06

    Free at launch. Funded by businesses, not your attention.

    We don't sell your data, we don't run ads in personal feeds, and we don't exploit your attention for growth.

    LinkConnect is free for personal accounts at launch. There are no ads in your feed, no premium tier that changes what you see, and no subscription required to post, message, or join Circles.

    We don't sell personal data to advertisers, brokers, or partners. We don't use engagement-maximizing mechanics, dark patterns, or predatory notifications to keep you scrolling longer. The product is designed to be put down.

    Revenue comes from business accounts: optional promoted events and local area campaigns. Promoted content is clearly labelled and capped, never enters the Connect Feed, and only reaches people who follow the business or open Discovery.

    If we ever introduce optional paid features, they will be additive conveniences — never ways to buy reach, rank above others, or make your personal data valuable to us.

    How it's enforced

    • Personal accounts are free at launch; no ad inventory in the Connect Feed.
    • No data sales; no behavioural ad-targeting profiles.
    • Promoted business content capped at a few cards a day and separated from personal feeds.
    • These commitments are published publicly so users can hold us to them.

    The tradeoff

    Business revenue grows slower than ad revenue. We're choosing a sustainable model over the fastest growth.

    Questions about any of this?

    The FAQ goes deeper, and support answers anything it doesn't cover.