For Business The business case Pricing Security Get the app

For the person who signs

What convinces a person won't convince a company.

Someone on your team already found Buddie and liked it. That was an emotional decision, and it was allowed to be. You don't get to make one. You have to answer for where client information sits, who can read it, and what happens the day someone leaves.

Buddie is an end-to-end encrypted app for capturing links, notes, voice notes and photos on a phone, with reminders that bring them back and a team channel only seat holders can read. This page is not the consumer pitch with a business word in front of it. It is the evidence.

A 20-minute call. No trial signup, no card, nothing installed on your network.

Vendor security review — Buddie

Can the vendor read our staff's notes?

Content is encrypted on the device. The server stores ciphertext and a key wrapped by the user's own master key.

No

Who can read what a team shares?

Seat holders only. The team key is sealed for each member individually; we hold no usable copy.

Team only

What happens the day someone leaves?

An admin revokes the seat. They stop receiving team items immediately.

Same day

Does it touch our network or our systems?

No integration, no directory sync, no agent. It is an app on a phone.

No

SOC 2 or ISO 27001 certification?

Not held. The architecture above is what we can evidence today.

Not yet

The mismatch

Same product. Different wallet.

Buddie sells itself to a person in about nine seconds. To a business it has to survive a review, a budget line, and someone's professional reputation. Those are not the same argument delivered louder.

Consumer decision

Runs on emotion

  • Identity — the kind of person who keeps things in order
  • Experience — it felt good in the first minute
  • Relief — the mess finally has somewhere to go
  • Decided alone, reversed at no cost

Business decision

Runs on evidence

  • Proof — show me the mechanism, not the promise
  • Economics — the recovered hours must beat the seats
  • Risk reduction — what happens on the bad day
  • Decided by four people, and one of them can veto

If you market to the company the way you marketed to the customer, you don't lose the argument. You lose the deal, quietly, in a meeting you weren't in.

Who actually buys

Four people, one signature.

The person who loves Buddie is rarely the person who pays for it. Each of these has a different reason to say no, and only one of them has to.

Economic buyerPractice or operations lead
“Show me this is worth more than the seats cost.”
A model built on your headcount and your hourly cost, not our averages. It is below, and every input in it is yours to change.
Security reviewerIT lead or outsourced MSP
“Prove you can't read our clients' information.”
Encryption happens on the device before anything is sent. We hold ciphertext and a wrapped key. It is structural, not a policy we promise to keep.
User championThe person who already uses it
“Don't turn it into enterprise software.”
It stays the app they liked. Administration lives in one screen the rest of the team never opens, and there is nothing new for them to learn.
Legal & riskPartner, DPO or compliance
“Tell me what happens on the day it goes wrong.”
Seats are revoked by an admin, deletion is real and documented, and a lost phone exposes an encrypted store. What we cannot yet give you is a signed DPA and a certification — and we would rather say so here than in the review.

Proof, not vibes

Where the keys actually live.

Most tools in this category can read everything your staff put into them. That is the difference a reviewer is looking for, so here is the mechanism rather than an adjective.

A note is sealed on the phone, stored as ciphertext on the server, and opened only on a teammate's phone YOUR PHONE Note written Sealed with team key ciphertext OUR SERVER Stores the bytes Holds no usable key CANNOT READ IT ciphertext TEAMMATE'S PHONE Team key unsealed Note readable

Swipe the diagram sideways to follow it →

The team key is generated on a phone and sealed separately for each member against their own public key. It is never assembled on the server, so there is no position from which we could read a team's content — not under subpoena, not by a rogue engineer, not after a breach of our database.

The economics

What it costs against what it returns.

Every figure below is yours. There is not one industry average or invented benchmark in this model, because you would check it and you would be right to.

Minutes lost = re-finding something already saved, or redoing a follow-up nobody remembered. Time it for a week before you trust it.

Time recoveredHours per year across the team
Value of that timeAt the loaded rate you entered
What it costsSeats per year
Net positionYear one

What it costs

Three prices, no quote required.

You should not have to book a call to learn a price. Here it is, and the call is for the parts a page cannot answer.

Free

£0

One person, forever

  • Unlimited notes
  • 50 saved links, 10 voice notes
  • Three one-time reminders
  • Same encryption as every paid plan

For deciding whether the habit sticks.

Premium

£3.49 / month

Or £26.99 a year · one person

  • Unlimited links, voice notes and photos
  • Recurring reminders and custom snooze
  • Unlimited transcription
  • Partner sharing, one to one

Billed through the app store. Thirty-day trial, no card.

Team

£8 / seat / month

Everything in Premium, plus the team

  • A channel only seat holders can read
  • Owner and admin roles, invite and revoke
  • Pooled storage with visible usage
  • Seats removed the day someone leaves

Arranged on the call — there is no self-serve team checkout yet, and we would rather say so than send you to a dead button.

No setup fee, no minimum term and no annual lock-in. If it stops earning its seat, stop paying for it.

How trust is built here

Risk you can point at.

Trust in this market is not a feeling. It is a set of things a reviewer can verify, plus an honest list of the things they cannot yet.

Verifiable today

Encrypted before it leaves

Content is sealed on the device. The server receives ciphertext and a wrapped key, so there is no position from which we could read it.

Verifiable today

Seats you control

An owner or admin invites by email and revokes in one action. Revoking stops all future team content reaching that person the same day.

Verifiable today

Storage you can see

A team's photos and voice notes draw on one pooled allocation with visible usage, so nobody discovers a silent ceiling mid-week.

Verifiable today

Deletion that finishes

Closing an account removes the records and purges stored media. Deleted items leave the trash permanently after thirty days.

Verifiable today

Nothing to install

No agent, no directory integration, no access to your systems. The blast radius of adopting it is one app on one phone.

Not yet true

Certification and contract

No SOC 2, no ISO 27001, no signed DPA or SLA today. If your review requires them, we are not ready for you yet, and saying so now costs less than saying it in week six.

The full design is written up in how Buddie encrypts your data — every key, what the server holds, and the limits. One of those limits belongs here too: revoking a seat stops future access, not past access. Anything already downloaded to someone's phone stays on that phone. End-to-end encryption cannot reach back, and any vendor telling you otherwise is describing a system that can read your data.

Framed for the wallet-holder

Three capabilities, three outcomes.

Fewer dropped commitments

Capture that survives the day

A link, a note, a voice memo between meetings, a photo of a whiteboard. It lands in one place in under five seconds, which is the only reason people actually do it.

Work stops living in personal accounts

A channel only your team can read

What staff share moves onto a team channel instead of personal notes-to-self and camera rolls. Same habit, inside something you control.

The security questionnaire stops blocking

An answer for the reviewer

Most tools here can read everything your staff put in them. That single architectural difference is what gets Buddie through a review others do not survive.

Before you ask

The four objections.

We already have Notion, OneNote, or a shared drive.

Those are where information goes once it is already a document. This is the thirty seconds before that, on a phone, in a corridor — the part that currently lands in personal WhatsApp notes-to-self and camera rolls, outside anything you control. It is additive, and it competes with the notes app, not with your workspace.

What does switching cost us?

Nothing migrates, because nothing has to. There is no import, no restructuring, and no project plan. If it does not stick in a fortnight, people stop opening an app and you stop paying for it.

Will this survive procurement?

Partly, and here is the honest line. The encryption architecture answers the hardest question a reviewer asks, and seat control answers the second. The certification and contract questions we cannot answer yet. If your process requires SOC 2 or a signed DPA to start, wait for us.

Who has to champion this internally?

The person who already uses it, which is usually who sent you this page. That is the cheapest adoption story available to you: no rollout, no training, no internal comms campaign.

The whole argument

Great marketers don't just understand what they sell. They understand who makes the decision to buy.

A real conversation, not a demo script. Twenty minutes, no card, and nothing installed on your network.

  • You get the model filled inThe economics above, with your headcount and your rates.
  • You get the security answers in writingSomething you can forward to whoever reviews vendors.
  • You get a straight no if it is oneIf your process needs SOC 2 or a signed DPA today, we will say so rather than waste six weeks.

We use what you send to reply to you, nothing else. No list, no sequence, no reselling.