June 2026: moving Confrmo onto confrmo.com and keeping each person's data apart

June was about making Confrmo safe to use in ordinary life, where phones get shared, borrowed and handed round.

A new home on confrmo.com

On 10 June the app moved onto confrmo.com, its permanent address. Moving an identity service is delicate. Every sign-in, every registration and every stored profile has to follow it across without a gap, so I rebuilt the registration and sign-in paths as part of the move rather than patching them afterwards.

Each person's data kept apart

On a shared phone, one person's profile or photo must never appear for the next person who signs in. I chose to isolate every profile and photo per person. I also made signing out mean the device genuinely forgets you by clearing everything held in memory rather than just changing the screen.

I also made sure the face check on a first sign-in cannot be stepped around. The order in which the app learns who you are and whether your face is enrolled now makes that gate impossible to skip.

None of this is visible when it works, which is the aim: privacy on a shared device should be something nobody has to think about.

Why it matters

Identity apps are often tested on a single phone by a single person. Real life is messier. Families share tablets, staff share devices at work and people lend their phones. Designing for that from the start means Confrmo can be trusted in exactly the places identity matters most. It set the app up for its public launch the following month.