Our holdings · Wholly owned
Pully
An identity you hold and nobody else can read — used to sign in without a password, and to know exactly who you are talking to.
What it is
Pully is an application for iOS, with an Android release in development. It creates a cryptographic identity on your device — a private key that never leaves it and that we never see — and then puts that identity to work in two directions.
Outward, it proves you are you. Websites and applications can offer “Sign in with Pully” beside their Google and Apple buttons; signing in is a confirmation on your phone rather than a password. Because there is no shared secret, there is nothing for a site to store, nothing to leak in its next breach, and nothing to phish. It also serves as an authenticator, holding the one-time codes people currently keep in a separate app.
Inward, it tells you who is reaching you. A message, a call or an invitation in Pully is cryptographically attributable to the identity that sent it. Nobody can pose as your bank, your colleague, or a family member, because posing would require a key they do not have.
Around that identity sits a set of private communications tools: direct messages, photos and voice notes, encrypted voice and video calls, shared events, and a contact model in which everyone begins unable to reach you until you decide otherwise.
Capabilities
Passwordless sign-in
Log into participating websites by approving a prompt on your phone. No password to choose, reuse, store, forget or have stolen.
Authenticator
Keeps the one-time codes you already depend on, inside the same identity rather than in a separate application on the same device.
Private messaging
Text, photos and voice notes, end-to-end encrypted. Readable by the people in the conversation and by nobody else, including us.
Encrypted calls
Voice and video between Pully identities, encrypted end to end and carried directly between devices wherever the network allows.
Reachability you control
Everyone starts blocked. People reach you because you allowed it, which is why there is no spam problem to solve after the fact.
Social recovery
If you lose the device, a person you trust is the way back in — recovery through a human relationship rather than a support ticket.
Events
Plan and share events with the people you choose, with the same privacy properties as the rest of the application.
Developer integration
A documented OpenID Connect integration and a published package let a site add Pully sign-in without adopting our infrastructure wholesale.
How the privacy claim actually works
“Private” is a word every messaging product uses, so it is worth being specific about ours.
- Your identity is derived from a secret generated on your device. It is never transmitted to us, and we cannot reconstruct it.
- Message contents, media and call streams are encrypted end to end. Our servers route ciphertext; they do not hold the keys to it.
- Pully does not require a phone number or an email address to create an identity, so the usual permanent link between an account and a real-world directory entry is simply absent.
- Display names are stored in a form our servers cannot read, so the social graph a breach would ordinarily expose is not sitting there to be exposed.
- There is no advertising business, no data brokerage, and no analytics product built on user behavior. There is nothing to sell because we did not collect it.
The full, binding statement of what the application does and does not collect is the Pully privacy policy.
Availability
| iOS | Available on the App Store |
|---|---|
| Android | In development; not yet published |
| Web | pully.talk/app |
| Price | Free to download and use |
| Product site | pully.talk |
| For developers | pully.talk/developers |
| Support | pully.talk/support |
| Publisher | KJA Holdings |