Terpoir is a private journal for your sessions, products and spots. Over time it shows you the patterns: what actually helps you sleep, what makes you anxious, which shop's stuff tends to work. Your data stays encrypted with a key only you hold.
Most of us keep track in memory. And memory is, let's say, not the most reliable instrument in this particular lab.
Terpoir is a notebook in the spirit of careful self-experimenters: write down what you took, how much, and how it went. Do it a few dozen times and your own answers start to show up. Not the label's answer, not the budtender's. Yours.
Tap and talk. Transcription runs on your phone and is never sent anywhere. Scan a receipt or a label and the products fill themselves in.
Terpoir suggests effects and flavors from what you said, each one linked to your words. You accept, fix or toss them. Only what you confirm counts.
Plain statistics, not a chatbot's hunch. Every insight shows the sessions behind it, flags things like dose and time of day, and stays quiet until there's enough to say.
You can tap through to every session behind an insight, mute a category, or mark one wrong. Insights are off until you turn them on, and they never pretend to be medical advice.
It also learns where things come from: which shops tend to sell what works for you, and whether that's the shop or just what you pick there.
There's no Terpoir cloud to hack, sell or subpoena, because there's no Terpoir cloud. Everything is encrypted on your phone before it goes anywhere.
Every entry gets its own key, locked by a recovery key that never leaves your hands. Delete an entry and its key is destroyed, so leftover copies become noise.
Google Drive, iCloud, Nextcloud, an S3 bucket, Syncthing, or a file on a USB stick. They only ever see scrambled blobs with random names.
Location, notifications, lookups, model features: all off until you say otherwise, and every switch tells you exactly what it reveals and to whom.
No crash-reporting SDKs either. Release builds don't even keep logs. There's nothing to send, and nowhere to send it.
Neutral notifications, an optional plain-looking icon, an app lock that follows your phone (or tighter, if you like), and a calm, deliberate wipe if you ever want out.
The code is public under the GPL. Builds are reproducible and signed, so anyone can check the app matches the source.
Totally allowed. Turn on maps, address lookup, online product catalogs or richer notifications. Terpoir just tells you plainly what each one leaks before you flip it, and every switch has an off that cleans up after itself.
Terpoir is designed and guided by Nate, a security person who's been happily running free software for a long time. Almost all of the code is written with Claude. That's not a secret; it's in the repo.
The design and art should come from human artists, and they will. If you're one and that idea doesn't make you want to throw your tablet, I'd love to talk.
There's a trademark, and some legal fees. Because capitalism. It gives me the ick too. But if this works even a little, someone will try to slap ads on a copy and call it the real thing. The name and the signed builds are how you know you've got the original.
Plenty of people will have good reasons why this is a terrible idea. Some of them are probably right. I'm building it anyway, as openly as I can.
Tips help cover the trademark, the legal fees and the time. They unlock nothing, because everything that matters is already free. Not in a tipping mood? Telling a friend about Terpoir helps just as much.
It's not out yet. Watch the repository to follow along, or check back here. When it ships, it'll be on:
Signing-certificate fingerprints and release hashes will be published on this page at launch.