Sapien
Built around six ideas.
Sapien isn't a kitchen sink. There are six things the network does, and we spent every other product cycle saying "no" to the things that didn't fit. Here's the long version.
Nobody posts without proving they exist.
Every account that wants to post on Sapien clears identity verification through Stripe Identity — a government-issued ID, a live selfie, and a check against everyone already on the network. One human, one account. Bots don't pass. Impersonators don't pass. Throwaway armies don't pass.
The verification data lives at Stripe, not us. Sapien stores a yes/no and an opaque reference token; we never see your driver's license or your selfie. You can browse before you verify — but to post, comment, reply on Wire, or DM someone, the network has to know you're real.
- Stripe Identity: ID document + liveness selfie
- Network-wide deduplication — one person, one account
- Verification data stays at Stripe; we hold a reference token
- Ban-evasion is permanent — the identity, not the account, is the key
Real human on the byline.
Real photos. Real videos. Real people.
Sapien's posting flow accepts content from exactly one place: your camera roll. Not a URL. Not a desktop folder. Not a paste from somewhere else. The photo or video has to come off the device in your hand — the same device that took it.
It's a deliberately strict rule. It rules out a lot of legitimate workflows we could be building for. We hold the line because it's the only way the feed stays a record of actual moments your friends lived through instead of a wall of generated nonsense.
- Native iOS Photos picker, no browser uploads
- No re-shares, reposts, or "import from" flows
- If it didn't happen on a phone, it doesn't go on Sapien
Not from a URL.
Not from anywhere else.
Inner Circle. Outer Circle. Nobody else.
Every person you connect with on Sapien lives in exactly one of two circles. The Inner Circle is intimate — the people who get the unfiltered version of you. The Outer Circle is friendly — the people who get the curated version. You can move people between circles at any time, and they'll never know.
When you post inside your circles, you pick the circle and you can optionally set an expiration: a day, a week, forever — whatever fits the post. When the expiration hits, the post is removed from feeds, from your profile, from storage, from the CDN. Wire is the public, on-the-record posting surface — circles are the private one.
- Mutual-only follows by default — both sides have to opt in
- Move people between circles silently — they don't get notified
- Optional per-post expiration: 1h / 24h / 7d / 30d / 90d / never
- Hard-delete from storage on expiry — not a soft-delete flag
One theme. One day. Real names only.
Wire is Sapien's public, text-only broadcast — the part of the network that's on the record. The mechanic is simple: every day, the network gets a single Theme of the Day — a question, a prompt, a provocation — and the entire network answers it under their verified real names. One theme. One day. Everyone in the same conversation.
A Wire post is a text "transmission" — up to 280 characters, threaded with replies, no media required. Your real name is on the byline. There's no expiration unless you delete it yourself. There are no follower counts, no ranking, no algorithmic amplification. It's what serious public discourse looks like when nobody can hide and the conversation has a shape.
Replies on Wire can only come from other verified humans. No anonymous trolls. No botnet pile-ons. No AI swarms astroturfing the comments. If somebody disagrees with you on Wire, you're disagreeing with a real person who cleared the same bar you did.
- One global Theme of the Day, every day
- Text posts up to 280 characters, threaded replies
- Public to anyone with the link, under your verified real name
- No expiration by default — you delete it when you're done
- Replies open to other verified humans only
- No follower counts, no engagement scores, no virality bait
version of the story."
Direct messages, cryptographically private.
Direct messages on Sapien are encrypted end-to-end using the Signal Protocol's X3DH key agreement and Double Ratchet algorithm — the same cryptographic primitives that power Signal itself. Messages are sealed before they leave your device and opened only on the recipient's.
Our servers can't read your messages, even if we wanted to. Subpoenas reach the same wall. Encryption keys live on the device that generated them, never sync to our servers, and rotate with every message (forward secrecy — if a key is compromised tomorrow, the messages from today are still safe).
- X3DH initial key agreement, per-device key bundles
- Double Ratchet for forward + backward secrecy
- No key escrow, no master key, no recovery key
- Server stores only ciphertext — never the plaintext or keys
- Lose your device, lose the history. That's the deal.
Opened on theirs.
Nobody in the middle.
The membership. How posting works.
Shield is Sapien's membership tier. Browsing is free. Posting, commenting, replying on Wire, and sending DMs all require an active Shield subscription — on top of being a verified human. That's deliberate: a non-zero floor to post is part of how the network keeps spam out, keeps identity-verification operations paid for, and keeps our incentives aligned with the people on it.
Shield is processed through Apple In-App Purchase. Pricing is shown at checkout. You can cancel from your Apple ID settings anytime, no support ticket required. If you cancel, your account stays — you keep what you've already posted, and you can keep reading the network. You just can't post new content until Shield is active again.
- Required to post, comment, Wire, or DM
- Requires identity verification through Stripe Identity
- Apple In-App Purchase — cancel anytime
- Your prior posts stay live if you cancel; new posts pause
Post as a member.
Stories.
Reels.
Trending.
Discover.
We aren't building those.
Every feature on Sapien earned its way in by passing the test: does this make the network feel more like talking to a person, or less? Stranger discovery failed. Trending pages failed. Algorithmic recommendations failed. Streaks, badges, engagement loops — all failed. So they're not here.
The list of features Sapien doesn't have is the most opinionated thing about the product. It's also the part that's the hardest to walk back, which is why we put it in writing.
Be one of the first humans on Sapien.
We're rolling out invites in waves through 2026. Drop your email and we'll send your TestFlight invite when your wave opens.