End-to-end encrypted
Create and share private catalogs—without giving up your privacy.
OnlyMenu IO keeps your products, prices, photos and messages encrypted on your device. Your protected catalog and message content is encrypted on your phone before upload, so our servers cannot read it.
Free · No ads · No tracking · iOS 15.1+ · Android 7.0+
Everything you need to present, share, and discuss your products.
OnlyMenu IO combines flexible product catalogs with private messaging, so your products and conversations stay organized in one place.
Encrypted catalogs
Catalog names, product titles, prices, descriptions, tags, photos and videos are all encrypted on your device before upload. Video uploads can be tuned for quality or for data use.
Private messaging
Direct and group chats with the same encryption as your catalogs. Attachments are encrypted too — we store ciphertext, nothing else. Clear a conversation from your own list, or block someone, whenever you want.
Share by invite link
Invite customers, collaborators, or team members using a catalog link. Invites can have auto access or request approval.
No ads, ever
No advertising, no third-party analytics or tracking SDKs, no cross-app tracking. We do not build advertising profiles.
Control your account
Delete your account yourself from the Account tab. Your profile, catalogs, media, conversations, and keys are permanently removed according to our deletion policy.
Free to use
OnlyMenu IO is currently free, with no in-app purchases and no subscriptions.
See OnlyMenu IO in action
Real screens, not mockups.
How the encryption actually works
No marketing word for it. Here is the scheme, so you can judge it rather than take our word.
Keys never leave the device
Your private key is generated on your phone and held in the operating system's secure storage. It is never sent to us.
Optional encrypted backup
Move to a new phone with a backup encrypted by a passphrase only you know, derived with PBKDF2-SHA256. Lose the passphrase and even we cannot bring it back.
Row-level access control
Even in ciphertext, an account can only reach the records it is entitled to — enforced by the database, not by the app.
- Key exchange
- X25519 ECDH
- Content encryption
- AES-256-GCM
- Key backup
- PBKDF2-SHA256, 100,000 iterations
- Private key storage
- iOS Keychain, on device only
- What we can read
- None of your catalog or message content
What is not encrypted
Some things have to stay readable for the app to work at all: your email address, username, display name, profile photo, catalog cover photos, push notification tokens, support requests, and metadata such as group and catalog membership and message timestamps.
Profile photos and catalog cover photos are kept in public storage and can be viewed by anyone holding the direct link. Do not use an image there that you would not want to be public.
The same honesty applies to moderation. Because content is encrypted we cannot scan it, so we do not pretend to. Moderation runs on user reports instead — reporting, blocking and muting are available from every direct conversation, group chat and profile, and we act on reports ordinarily within 24 hours. Read the whole picture in the Privacy Policy and the Terms of Service.
Questions
Can you read my catalogs or messages?
No. Content is encrypted on your device with a key we never receive, so we cannot read it, cannot recover it for you, and cannot produce it in readable form to anyone else.
What happens if I lose my phone?
If you made an encrypted key backup, restore it on the new device with your passphrase. Without a backup, the content encrypted to that key cannot be recovered — by you or by us. That is the trade-off end-to-end encryption makes.
A catalog somebody else shared with you is a separate case: it was encrypted to the key your account had at the time, so if that key changed, restoring a backup will not open it. Ask its owner to share it again. The app tells you which catalogs a restore unlocked and which it did not.
Is it free?
Yes, currently free, with no in-app purchases and no subscriptions. If paid features are ever introduced we will update the Terms and, where required, ask for your consent before any charge.
Do large videos take forever to upload?
Video is compressed on your device before it is encrypted and sent, and you choose the trade-off: High, Balanced or Data Saver. Balanced is the default and holds 720p — sharp on a phone screen and far faster to send. The setting is in the Account tab and applies to every upload after you change it.
Is there an Android version?
Yes. OnlyMenu IO is on Google Play for Android 7.0 and later, and on the App Store for iPhone. The two apps are the same product and talk to each other — a catalog shared from one opens on the other.
Is there a web version?
No. OnlyMenu IO is a mobile app. Keeping the private key in the phone's secure storage is a large part of why the encryption holds, and a browser is a much weaker place to keep one.
How do I report abuse?
Every conversation, group chat and profile has report, block and mute in its menu. Everyone you have blocked is listed under Blocked Users in the Account tab, so a block is never stranded behind a conversation you have since left. If you cannot use the app, use the report abuse page.
How do I delete my account?
Open the Account tab and delete it there — no need to contact us. Deletion is permanent. Abuse reports are the one exception: they are kept with your account link removed, so that deleting an account cannot erase a record needed to protect someone else.
Who makes OnlyMenu IO?
Avante Studio LLC. Reach us at support@onlymenu.io.