Only You

The description states that Only You is a native iOS app for iOS 18+, built using SwiftUI, Next.js, React, TypeScript, Supabase, PostgreSQL, Cloudflare R2, and various cryptographic libraries including CryptoKit. It supports:

• Invitation-only albums
• Photo grid and feed
• Stories, comments, reactions
• Member roles (owner, admin, contributor, read-only)
• End-to-end encryption using AES-256-GCM, X25519 device keys, HKDF-SHA-256 key wrapping
• Album-scoped keys that are never stored in plaintext by the service
• Media storage in a private Cloudflare R2 bucket in Europe

The app also includes:

• A local operations dashboard that cannot decrypt user content
• English and French landing pages
• A demo video built with Remotion
• Deterministic synthetic data for demonstration purposes

Inference The product is described as a full social network experience within private albums, but the author does not claim any real-world usage or adoption.

The author positions Only You as:

• A private social network designed for people already in a relationship or circle.
• An alternative to Instagram (which prioritizes reach) and WhatsApp (which buries memories).
• A product that combines the social experience of a feed, stories, comments, and reactions, with the privacy controls of an encrypted album.

The claim evolution shows:

1. Initial problem: Family photos are lost in group chats.
2. Solution: Encrypted albums with social features.
3. Differentiation: Not just a private folder or backup tool, but a complete social experience within a small, explicit circle.
4. Business model: Free for personal use, paid for events.

Inference The positioning is clear and consistent, but the author does not provide evidence of market testing or user feedback beyond their own narrative.

The description states that Only You targets:

• Families
• Couples
• Groups of friends
• Trip participants
• Event organizers (e.g., wedding planners, school trip leaders)

It also mentions that the business model is deliberately simple, with free personal albums and paid event albums.

Inference The ICP appears to be individuals or small groups who value privacy and want a shared space for memories without public exposure. However, there is no evidence of actual customer segmentation or user validation.

The business model described is:

• Free personal albums (for families, couples, friends)
• Paid event albums where organizers pay to create QR codes for guests to join and contribute photos
• No ads or monetization based on private family photos
• Guests pay nothing; the organizer pays

Inference The model is described as simple and user-centric, but there is no evidence of pricing tiers, revenue streams, or actual sales.

The author states:

• Built with SwiftUI, Next.js, React, TypeScript, Supabase, PostgreSQL, Cloudflare R2
• Uses CryptoKit for encryption (AES-256-GCM, X25519, HKDF-SHA-256)
• Implements Row Level Security and transactional RPCs
• Media stored in a private Cloudflare R2 bucket
• Encrypted content passes through a fail-closed moderation check before encryption
• Uses Codex and GPT-5.6 to build the system end-to-end

Inference The technical stack is well-defined, but there is no evidence of production deployment or performance data.

The description states:

• The project was built in one week during OpenAI Build Week
• Includes a deterministic Vanessa demo with 21 synthetic images
• A judge can clone the project and run one script to see the app in action
• No real-world users or adoption data are mentioned

Inference There is no evidence of traction, revenue, or user engagement. The product exists only as a prototype.

The author states:

• They looked for similar apps but found mostly private album products with decent storage, couple utilities, or encrypted photo backup
• No existing product felt like a complete social network for small, explicit circles

Inference The competitive landscape is described by the author, but there is no evidence of market research or competitive analysis beyond their own claims.

Key risks and red flags:

1. No real-world usage or validation: The product is described as a prototype with synthetic data.
2. Single-person team: Only one developer (Anis AYARI) is listed, which raises concerns about scalability and execution.
3. Unproven business model: There is no evidence of revenue, pricing, or customer acquisition.
4. No third-party verification: The entire description is self-reported and unverified.
5. Limited platform support: Only iOS 18+ is supported, limiting reach.

1. What is the current status of user testing or feedback?
2. How do you plan to scale beyond a single developer?
3. Have you validated the event business model with real organizers?
4. What are your plans for expanding beyond iOS?
5. How do you intend to handle key lifecycle management in practice (e.g., device loss, recovery)?
6. Are there any legal or compliance considerations around end-to-end encryption and data handling?

evidenced

The description states: "Only You is a real private social network built around invitation-only albums. A family, couple, group of friends, trip, or event gets its own social space."

inferred

The description implies that the primary customer segments are:

1. Families
2. Couples
3. Groups of friends
4. Event organizers (for paid Event Albums)

These inferences are based on the examples given in the "What I built" section and the "The event business model" section.

evidenced

The description states: "Only You is the end-to-end encrypted social network for families, couples, trips and events."

It also states: "There is no public profile, follower count, stranger recommendation, or algorithm deciding who should see a post. The audience is the album."

And: "The short version is simple: end-to-end encrypted albums; keys stay on authorized devices."

inferred

The value proposition includes:

1. Privacy through end-to-end encryption
2. A social network experience tailored for small, explicit circles
3. Ease of finding and organizing photos within a shared album
4. No public profiles or stranger recommendations
5. Event-based sharing without the need for group chats

These inferences are based on the description's emphasis on privacy, invitation-only access, and the specific use cases mentioned.

evidenced

The description states: "Invitations work by link, username, or QR code."

inferred

The channels through which users discover and join albums include:

1. Direct links
2. Username invitations
3. QR codes

This inference is based on the explicit statement about how invitations work.

evidenced

The description states: "Album owners can assign owner, admin, contributor, or read-only roles."

inferred

The customer relationship model includes:

1. Role-based access control (owner, admin, contributor, read-only)
2. Invitation-based membership
3. Shared album experience for family, couples, friends, and events

These inferences are based on the role assignment capability and the nature of shared albums described.

evidenced

The description states: "Revenue comes from events."

And: "The business model is deliberately simple. Normal private albums for families, couples, and friends can stay free. Revenue comes from events."

And: "An organizer pays for an Event Album and receives a QR code to display at a wedding, festival, concert, birthday, school trip, or company retreat."

inferred

The revenue stream model includes:

1. Paid Event Albums for event organizers
2. Free private albums for families, couples, and friends

This inference is based on the explicit statement about revenue coming from events while keeping normal albums free.

evidenced

The description states: "Built with (author-declared): cloudflare-r2, codex, cryptokit, gpt-5.6, ios, next.js, openai-moderation, postgresql, react, remotion, row-level-security, supabase, swift, swiftui, typescript, vitest"

inferred

Key resources include:

1. iOS app built with SwiftUI
2. Supabase for authentication and Postgres database
3. Cloudflare R2 for encrypted media storage
4. Cryptokit for encryption
5. GPT-5.6 and Codex for development assistance
6. Row Level Security for database access control
7. React and Next.js for landing page
8. Remotion for demo video creation

These inferences are based on the technology stack mentioned in the "Built with" section.

evidenced

The description states: "I spent time looking for similar apps... I mostly found private album products with decent storage, couple utilities, or encrypted photo backup. I did not find a product that felt like a complete social network for a small, explicit circle."

And: "I built Only You during OpenAI Build Week in one long Codex Desktop thread using GPT-5.6."

inferred

Key activities include:

1. Identifying market gaps in existing private album products
2. Developing the core product using AI assistance (Codex and GPT-5.6)
3. Implementing encryption and key management systems
4. Designing user experience for shared albums
5. Creating event-based sharing functionality

These inferences are based on the author's description of their process and development approach.

evidenced

The description states: "I made the product decisions: albums instead of followers, no public discovery, event organizers as the paying customer, and no hidden server recovery key."

And: "Codex and GPT-5.6 made it possible to build and verify far more of that system in one week than I could have done alone."

inferred

Key partnerships include:

1. OpenAI (through Codex and GPT-5.6)
2. Cloudflare (for R2 storage)
3. Supabase (for authentication and database services)
4. Apple (iOS platform)

These inferences are based on the technology stack mentioned and the development approach described.

evidenced

The description states: "Encrypted media is stored in a private Cloudflare R2 bucket in Europe."

And: "A separate authenticated media service checks album permissions before every operation."

And: "New photos pass through a fail-closed moderation check before client-side encryption and encrypted storage."

inferred

Cost structure includes:

1. Cloudflare R2 storage costs
2. Supabase authentication and database hosting costs
3. Development time and resources (including AI assistance)
4. iOS development platform costs

These inferences are based on the technology stack mentioned and the implementation details provided.

Customer Segments

evidenced

• The description explicitly states that families, couples, groups of friends, trips, and events get their own social space.

Value Propositions

evidenced

• The description explicitly states that Only You is an end-to-end encrypted social network for families, couples, trips and events.
• It also explicitly states that there is no public profile, follower count, stranger recommendation, or algorithm deciding who should see a post.
• The short version is simple: end-to-end encrypted albums; keys stay on authorized devices.

Channels

evidenced

• The description explicitly states that invitations work by link, username, or QR code.

Customer Relationships

evidenced

• The description explicitly states that album owners can assign owner, admin, contributor, or read-only roles.

Revenue Streams

evidenced

• The description explicitly states that revenue comes from events and that the business model is deliberately simple with normal private albums staying free.
• It also explicitly states that an organizer pays for an Event Album and receives a QR code to display at events.

Key Resources

evidenced

• The description explicitly lists all technologies used in building Only You.

Key Activities

evidenced

• The description explicitly states that the author spent time looking for similar apps and built the product during OpenAI Build Week.

Key Partnerships

evidenced

• The description explicitly states that the author made product decisions and used Codex and GPT-5.6 for development assistance.

Cost Structure

evidenced

• The description explicitly states that encrypted media is stored in a private Cloudflare R2 bucket and that a separate authenticated media service checks album permissions.

Evidence & Gaps

inferred

• The description is self-reported and unverified, so all findings are based on the author's own account.
• No revenue, customer or traction data is available beyond what they state.