Skip to content
Graphophone

Roadmap

Honest about where we are.

Five phases. The first one is already built. Each later phase ships when the privacy invariants survive it.

  1. Shipped
  2. Next
  3. Then
  4. Later
  5. Eventually

  1. Shipped

    Already in the 1.0 build.

    • Encrypted-at-rest vault: Argon2id + XChaCha20-Poly1305 + HKDF-SHA256, per-entry AAD-bound seal (title, body, tags).
    • SQLite repository of per-entry ciphertext, full-text search with BM25 ranking, encrypted attachments.
    • Local AI tier router with on-device candle backend across four model tiers (0.5B / 1.5B / Qwen 3 4B / 7B, picked to fit the device): multi-turn reflection, AI summaries, and ask-your-journal Q&A with cited entries + semantic 'find by meaning' — all on-device.
    • Voice journaling with on-device Whisper transcription — tap or hold to talk, transcribed and answered without leaving the device.
    • Model server you run yourself (Ollama / LM Studio over your own network), off until you set it up and surfaced by the network indicator whenever it is in use.
    • End-to-end encrypted multi-device sync through a folder you already sync — sealed files only, exchanged on demand. In beta.
    • OpenAI + Anthropic streaming cloud adapters (in the core; bring-your-own-key cloud routing is not yet enabled in the app — today AI runs on-device unless you point it at a model server you run yourself).
    • Insights over a week or month window, mined on-device from your own entries, plus an automatic weekly read you can open into a conversation.
    • Mood inference from what you wrote — suggested, never assumed, and always yours to change.
    • Guided CBT programs (offline, on-device), free on every tier.
    • Encrypted .ajbackup format with cross-vault restore.
    • Per-tag AI access controls (incl. an absolute #no-ai floor), decoy vault, panic-wipe.
    • Shamir secret-sharing for Legacy Mode key recovery (in the core; not yet surfaced in the app).
    • Markdown export to Obsidian-compatible vault folder.
    • Lifetime Pass entitlement, offline Ed25519 redemption-code path.
    • Marketing site: Lighthouse 100/100/100/100, JSON-LD across the board, no third-party JS.
  2. Next

    v0.2 on-device intelligence

    Behind a feature flag in the next public beta.

    • Persisted vector index (sqlite-vec) so ask + semantic search scale without re-embedding the vault each query (the on-device search itself already ships).
    • Daily prompt notifications generated locally by default (a model server you configure would generate them instead).
    • Apple Foundation Models / Gemini Nano adapters on supported devices.
  3. Then

    v0.3 reflective surface

    Designs locked, implementation queued behind v0.2 stability.

    • Pattern detective (writing × sleep × activity, opt-in HealthKit / Health Connect).
    • Time-travel chat (chat grounded in a journal window of your choosing).
    • Reflection prompts adapted to your patterns.
  4. Later

    v0.4 power-user & differentiation

    Where the Lifetime Pass really earns its keep.

    • Memory anchors (place + time triggers).
  5. Eventually

    v0.5 voice & expression

    On the slate, not yet committed for a specific quarter.

    • Walk-and-talk capture (lock-screen widget).
    • On-device voice clone for entry playback (Piper / Coqui).
    • Watch / Wear OS quick capture.
    • Sketch / drawing entries.

The rules

Principles we won't break

  • The next feature can't break the privacy invariants. Any work that touches a network must run through NetworkObserver and surface in the AI Audit Log.
  • We don't ship a feature that requires giving us your data. If a thing must phone home, it's BYOK or it's not in the app.

Want to nudge a feature up the list? Email hello@graphophone.app with the use case. We read every one.

Start a journal that talks back.

Free to download. No account, no ads, no trackers. Upgrade to Depth when you want more.

Get the app See what Depth adds