Pick up a thread
Choose a conversation from the left, search for someone, or start a group.
Profile
—
—
—
Starting Threadline…
Your conversations stay tied to your account, not this device.
This passcode is an extra local lock on top of your account sign-in. It is hashed with SHA-256 before it ever leaves this check — but a client-side passcode is not a substitute for real authentication. See for details.
By continuing you agree this is a demo-grade security model. Read the .
Choose a conversation from the left, search for someone, or start a group.
No messages yet. Say hi 👋
Ask @AI_Assistant anything. Your history here is private to you.
Signing in uses Firebase Authentication — this is your real account. The 6-digit passcode is an additional local lock: it's hashed with SHA-256 in your browser before being checked, but hashing alone does not make it a substitute for account authentication. Set it the first time you sign in, and change or reset it any time from Settings.
Your profile has a display name, optional photo, and a Unique Search Code others use to find you. Edit any of these from Settings → Profile. Your code stays constant unless you regenerate it.
Search for someone by their code, open their card, and start a private chat. Only the two of you can read it — enforced by Firestore Security Rules, not just the interface.
Create a group, name it, add members by their code, and manage roles. The creator is Owner. Owners and admins can rename the group, change its photo, add or remove members, and promote or demote admins. If an owner leaves, ownership must transfer first — a group is never left without one.
Attach images or videos from the paperclip button, or hold the microphone to record a voice note — played back at 1×, 1.5×, or 2× speed. Files are validated for type and size before upload.
Long-press or right-click a message to react with an emoji or forward it to another private chat, group, or Global Chat. A forwarded copy is authorized independently by its destination.
Online status and "last seen" are approximate, based on periodic heartbeats — not a perfectly live signal. Typing indicators clear automatically after a short pause. Disappearing messages hide content in the interface after the chosen duration; genuine deletion depends on server-side cleanup (such as a Firestore TTL policy), not just hiding it on your screen.
@AI_Assistant is a persistent, private thread — your history is saved per account and reloaded when you reopen it. In production, your message is sent to a server-side function that holds the AI provider's key; it's never placed directly in this app's frontend code.
Threadline uses client-side encryption where practical, Firestore/Storage authorization rules, and hashed local passcodes. It is a demonstration architecture, not an audited end-to-end encrypted system — group key distribution in particular is simplified. See Settings → Security for specifics before treating this as suitable for sensitive communication.
Enter someone's code to find their profile.
—
—
1 / 100 members (including you)
Groups are private by default: only members can see this group, its messages, and its member list. It will never appear in a public search.
Media and messages are protected in transit and in Storage/Firestore by authorization rules. Group-level end-to-end encryption uses a simplified per-group key for this demo; see the manual for the group-key rotation limitations.
Your passcode is hashed with SHA-256 client-side and never stored in plaintext. It supplements — but does not replace — Firebase Authentication.
This action cannot be undone.
A group always needs exactly one owner. Choose who takes over before you leave.