Writing

Building a backend we can't read

Shared expenses without being Splitwise, what it actually costs to build a backend that can never read its own users' data, and why that's the only honest version of the privacy promise.