Tuin-BETA

Tuin-BETA is a test release. It is for parents who want to try TEPP with their own family. It will change, and it has rough edges.

TEPP lets parents write down what their child's Nostr apps may do, as plans that those apps read and follow. Tuin-BETA does two things with it.

Plans for your child's apps. You write plans: who your child can see and talk to, and when. Tuin seals each plan to your child and publishes it to your family's relays. Other parents or guardians can share their plans with you, so that you can see theirs too.

A TEPP signer for your child's key. You make your child's key in Tuin, or import one. Tuin then signs for your child's other Nostr apps: on the same phone over NIP-55, and on the phone or the child's other devices over NIP-46, with a bunker address Tuin shows you. Before it signs anything, Guardian Alpha's TEPP engine checks the request against your family's plans, and Tuin refuses what the plans don't allow.

Your own key. Make one in Tuin, import one, or connect a signer you already use: a signer app on the phone (NIP-55) or a remote signer (NIP-46).

A parental lock. A PIN or a pattern keeps Tuin's own screens closed, so that Tuin can stay on your child's phone. The signer keeps working while Tuin is locked.

What Tuin-BETA does not do

• It governs your child's key, not the phone. Your child can make a new Nostr account in another app, and your plans won't apply to it.
• The lock guards Tuin's screens, not the phone. It doesn't stop anyone from uninstalling Tuin, clearing its data, or stopping it in the phone's settings.
• It can only refuse what passes through its signer. An app that signs through Tuin is refused what your plans don't allow, but what an app shows is up to that app: only an app that supports TEPP follows your plans in what it shows.
• It doesn't show you your child's messages or posts. The signer's log names the app, the kind of request and the answer, never the contents.
• It doesn't track where your child is, and it doesn't read other apps.

Setting up the child's phone. Let Tuin-BETA run in the background, or Android may stop the signer: allow it to ignore battery optimisation when it asks. On Xiaomi, Redmi and POCO phones, also allow its Autostart and set its battery saver to "No restrictions" (Tuin-BETA's phone screen opens those settings). Without Autostart, those phones keep the signer stopped after they end it, until Tuin-BETA is opened again.

Tuin-BETA keeps the keys it holds on the phone, wrapped by Android's keystore: your child's key, and yours if you made or imported it here. Keep a backup of both.

It needs Android 12 or later, on a 64-bit ARM phone. It has no ads, no analytics and no Google Play services.