Be present.
Stay connected.
HereMe replaces the paper visitor book. Check in at a school, an office, a church or a friend’s home with your phone, share only what you choose, and keep in touch with the people you have actually met.
A paper visitor book shows every visitor’s name and number to the next. HereMe shows the host only what you choose, and deletes its copy within seven days.
From the gate to goodbye.
A visit takes five steps. Nothing reaches the host unless you choose it.
-
1 Scan the poster
Every HereMe gate has a poster. Scan it with the app, or show your own pass and let the guard scan you.
-
2 Choose what to share
You see what the host asks for, why, and how long they keep it. Nothing is ticked for you.
-
3 Check in
The gate rings like a doorbell. The guard taps Check in, and your phone tells you you’re in.
-
4 Check out
At an organisation, the guard or the desk checks you out. At someone’s home, one of you ends the visit and the other confirms it.
-
5 Thank you
If the host chooses, a short thank-you follows. Your record of the visit stays on your phone.
No smartphone, or a flat battery? The guard can record you by hand on the HereMe Gate tablet, marked as a manual entry.
Your pass. Your visits. Your people.
One app for showing up and staying in touch, in English, Kiswahili and French.
A pass that is yours
Your HereMe ID and a live QR code. A pass lasts up to 7 days and renews itself when you open HereMe online during its last day. Its code changes every 15 seconds, so a screenshot goes stale.
Your visits, on your phone
Where you went and when, kept on your device, with optional backups to your own Google Drive, locked with a key only you hold.
Person to person
Visiting someone? One of you scans the other’s pass and taps Start a visit together; the other taps Confirm within 5 minutes. You are now connected.
A lost phone is not a lost account
From any browser, account.hereme.me signs you out everywhere, and each phone erases HereMe when it next connects.
A visitor book that runs itself.
Schools, churches, offices and estates run their gates from the web console. Households check visitors in from their own phones, on every plan.
A live queue
The console at console.hereme.me shows who is waiting and who is in, with visit records, charts and PDF exports.
HereMe Gate at the entrance
Android phones and tablets, enrolled with a one-time code, ring while a guard is on shift. On the Standard and Full plans.
Guards with a PIN
Each guard identifies on the tablet with their own PIN, and every check-in, denial and checkout names who did it.
Built for gates with a weak connection
HereMe Gate keeps checking passes when the network drops: passes are signed by HereMe and bound to the visitor’s phone, and the gate keeps its signed records, encrypted, until it reconnects. A gate without a connection learns of newly revoked passes only when it reconnects, and checks event tickets only online. A guard can always record a visitor by hand.
The console
console.hereme.me
- A live queue of who is waiting and who is in
- Visit records, charts and PDF exports
- Choose what visitors are asked for, and why
- Roles for owners, admins, managers, staff and viewers
- Sign in by approving with your phone
HereMe Gate
Android phones and tablets at the entrance, on Standard and Full
- Enrolled to your organisation with a one-time code
- Rings while a guard is on shift; open the request and tap Check in
- Scan a visitor’s pass, or record someone by hand
- Lost a tablet? Revoke it from the console
Your records, your rules
Hosts own what they receive
- Choose how long HereMe keeps your visit records, up to 7 days
- Export what you must keep; a weekly reminder helps
- Your own Trusted and Banned lists, under Standing, never shared with another host
- iTsitso staff never browse your visitors
Plans for organisations
- FreeKES 0The built-in front door with check-in by phone, and the console in one browser at a time.
- StandardKES 1,200 a monthHereMe Gate at the front door, events and the Event Integration API.
- FullKES 3,000 a monthNo plan limit on gates, HereMe Gate devices, events, API keys or console browsers.
- EnterpriseBy offerThe price and the limits, in an offer made to the organisation.
The price is the one shown when you pay; the Terms say what each plan includes. Payments run in a test environment for now: no real money moves.
Your documents. Your call. Every time.
Keep your national ID, passport and document photos in your HereMe vault, and share them only when you are at peace with it.
Item by item
You share one item at a time, with a host that has said why it needs it. Nothing is shared by default or remembered for next time.
Fresh consent for your ID
For your national ID, passport and scans, HereMe asks you to confirm it’s you every single time.
Copies that expire
At the host, only people allowed to see sensitive details can open what you shared, and HereMe deletes the host’s copy after at most 7 days. HereMe stores and shares your documents; it does not verify them.
Talk only with people you have met.
A visit is how two people meet on HereMe. After that, the conversation is theirs alone.
End-to-end encrypted
Every message is sealed on your phone for the other person’s devices. HereMe can’t read it.
Only after a visit
You can message only people you have met through a visit, and block anyone, quietly.
Quiet notices
The push HereMe sends carries no name and no text; your phone opens the message and writes the notice itself.
What HereMe does see: that a message was sent, by whom, to whom and when, kept 7 days. If you report a text message, its text is sent to HereMe so it can be looked at. Photos, files and voice notes can’t be reported; you can report or block the person instead.
HereMe is not a social network.
You are visible only to the hosts you visit and the people you have met. That is the whole design.
No directory, no search.
Nobody can look you up. Someone who types your exact HereMe ID sees your display name and photo, and any organisation you chose to show on your ID.
No feed, no followers.
There is nothing to scroll and nothing to perform. Visits create connections; nothing else does.
No promotional pushes.
HereMe notifies you when a visit needs you, for messages, and about your account’s security. Never to pull you back in.
No ads, no trackers.
No advertising and no analytics SDKs in the apps, and this website loads nothing from anyone else. We never sell your data.
Seven days. Then gone from our servers.
Private content does not pile up on HereMe’s servers. Your phone keeps your record; hosts keep their own exports.
Messages
Deleted from HereMe’s servers 7 days after they were sent.
A host’s visit records
And what you shared with it, at most 7 days after the visit; a host may choose fewer.
Your own visits
They leave the server too: your phone keeps your record.
Your vault
It stays until you delete it. Security logs are kept up to 24 months, to protect accounts.
What is end-to-end encrypted today
- Messages
- End-to-end encryptedHereMe can’t read them.
- Your vault
- Encrypted at restOur private server opens items to deliver the copies you share. Not end-to-end yet. iTsitso staff can’t read your vault.
- Visits and what hosts receive
- Not end-to-end yetProtected by the host’s permissions and deleted within 7 days.
We would rather tell you exactly where things stand. The database is in London, United Kingdom.
The Event Integration API
For ticketing and event systems that work with a HereMe organisation: create events, make HereMe people ticket holders by their HereMe ID, and read check-in status.
- A ticket is checked in once, at a HereMe gate, so two gates can never both admit it.
- Examples in curl, JavaScript and Python, and an OpenAPI file.
- Keys come from the organisation’s own console, for that organisation only, on the Standard and Full plans.
curl -sS https://api.hereme.me/v1/add-attendee \
-H "Authorization: Bearer $HEREME_API_KEY" \
-H "Content-Type: application/json" \
-H "Idempotency-Key: 9b2d7e10-…" \
-d '{
"external_event_id": "EVT-2026-HARVEST",
"hereme_id": "HM-7K3Q-9XWT",
"external_ticket_id": "TCK-000417",
"ticket_type": "VIP"
}'HereMe on your phone
HereMe for Android is on Google Play. The iPhone app is coming to the App Store. HereMe is being tested on real gates and real phones now: join the testers, or tell us what you found.
Until the iPhone app is in the App Store, HereMe sends iPhones no notifications: keep HereMe open when you expect a visitor or a visit to confirm.
-
Become a tester
Tell us which phone you have and where you would use HereMe: as a visitor, at home, or at your organisation’s gate. We will write back when there is a place.
Ask to test HereMe -
Tell us what you think
Something not working, an idea, or interest in running events with HereMe? The feedback form reaches the team at once. Please never send passwords, backup keys or ID numbers.
Send feedback -
Run a gate?
Organisations set up gates, guards and settings in the web console, and on Standard and Full run HereMe Gate on Android phones and tablets at the entrance.
Go to the console
Questions people ask
Short answers for when something goes wrong: a lost phone, no internet at the gate, a ticket that won’t scan.
Your phone
I lost my phone, or it was stolen. What do I do?
From any other phone or computer, go to account.hereme.me, sign in with the same Google account, or e-mail and password, that you use in the HereMe app, and choose Sign out everywhere and erase HereMe from my devices.
- Every device signed in to your account is signed out at once.
- Each phone erases what HereMe keeps on it — your pass and its keys, saved data, messages not yet sent — the next time it connects (on an iPhone, the next time HereMe opens). Until then it stays behind the phone’s own lock and HereMe’s encryption.
- Your account stays. Sign in on your new phone to carry on.
Anything that was only on the lost phone, such as visits made offline and not yet sent, can’t be brought back, and your messages come back only from your own backup (see the next question). The erase covers HereMe only: use your phone maker’s service to lock or wipe the rest of the phone.
I have a new phone. How do I get my messages back?
Your messages and your record of visits are kept on your phone, not by HereMe: HereMe deletes its copies after 7 days. To bring them to a new phone you need a backup.
- In the HereMe app you can back up to your own Google Drive. Backups are off until you turn them on, and locked with a key or a password that only you hold.
- On the new phone, sign in to HereMe, choose to restore, and enter your key or password.
- Your vault doesn’t need a backup: HereMe keeps it encrypted for you, and it is there when you sign in.
Without a backup, the old phone’s messages can’t be brought back. HereMe has no copy to restore.
I lost my backup key.
Only you can open your backups. HereMe never sees your key or password, so it can’t open or reset a backup for you.
If you still have your phone, nothing is lost: your messages are on it. If both the phone and the key are gone, that backup can’t be opened by anyone. The key is shown only once — write it down and keep it somewhere safe.
At the gate
The gate has no internet. Can I still get in?
Ask the guard. If HereMe can’t check you in, the guard can record you by hand on the HereMe Gate tablet, as a manual entry.
Event tickets are different: a ticket is checked in only while the gate is online. An offline gate shows “Can’t check tickets offline — check the list”, and admission is then up to the organiser.
My phone has no internet at the gate.
- Items from your vault, such as your ID or passport, can be shared only while your phone is online.
- Your HereMe pass lasts up to 7 days and renews itself online during its last day, so open HereMe while you have a connection before you set out.
- If your phone still can’t check you in, the guard can record you by hand.
I don’t have a smartphone, or my battery died.
You don’t need a phone to visit. The guard can record you by hand on the HereMe Gate tablet. Your name is always written down; your phone number too if the organisation requires it, otherwise only if you give it. Your e-mail address, why you came and whom you are visiting are written down only if you give them. Some organisations also require a photo of you, of your ID document, or both, taken on the tablet; the tablet shows the guard what that organisation requires, so they can tell you first. Photos are kept encrypted and deleted after at most 7 days. It is marked as a manual entry, written by that guard.
My event ticket says “already checked in”.
A ticket belongs to the HereMe ID it was sold to, and it is checked in once, with that person’s own HereMe pass, only while the gate is online — so two gates can never both admit it. If yours says “already checked in”, the gate tablet shows when and at which gate it was used.
Speak to the event’s organiser: they can see the check-in, and only they can decide what happens next. The ticket seller can read the check-in but can’t undo it.
Your data
Who can see my national ID or passport?
Only the hosts you choose, when you choose.
- Your ID, passport and document photos live in your HereMe vault. It is encrypted at rest, and only you and the hosts you share with can open items through HereMe.
- You share one item at a time, with a host that has said why it needs it, and HereMe asks you to confirm it’s you every time. Nothing is shared by default or remembered for next time.
- At the host, only people allowed to see sensitive details can open it, and HereMe deletes the host’s copy after at most 7 days.
- iTsitso staff can’t read your vault.
HereMe stores and shares your documents; it does not verify them.
How do I stop sharing? Can I take back what I shared?
Nothing reaches a host unless you choose it at that visit, so to stop, simply don’t choose it next time. You can delete any item from your vault at any time.
What you already shared is a copy the host received at that visit. It can’t be changed, it belongs to that host, and HereMe deletes it when the host’s retention ends — at most 7 days. If the host exported it before then, that copy is theirs: ask them.
Can HereMe read my messages?
No. Every message is end-to-end encrypted: HereMe can’t read it. It is sealed on your phone for the other person’s devices.
The push HereMe sends carries no name and no text: your phone opens the message itself and makes the notice. By default the notice shows who sent it and the first words; on a phone with a screen lock, the lock screen shows only “You have a new message”. You choose what the notice shows in the app’s Settings → Notifications → Message notifications show. On iPhones HereMe sends no notifications yet: no message, visit or security pushes until the iPhone app is in the App Store.
HereMe does see that a message was sent, by whom, to whom and when. If you report a text message, its text is sent to HereMe so it can be looked at. Photos, files and voice notes can’t be reported: report or block the person instead. You can message only people you have met through a visit.
How long does HereMe keep my data?
On HereMe’s servers, private content goes after 7 days:
- messages, 7 days after they were sent;
- a host’s visit records and what you shared with it, at most 7 days after the visit (a host may choose fewer);
- the server’s copy of your own visits — your phone keeps your record.
Your vault stays until you delete it. Hosts are reminded to export what they must keep, and their exports are theirs. Security logs are kept longer, up to 24 months, to protect accounts.
How do I delete my account?
In the app: on the Pass tab, tap your photo or initials at the top (My profile), then the gear (Settings), and choose Delete my account at the bottom; on a tablet, Settings is in the side bar. Your phone needs a connection. Without your phone, go to console.hereme.me/account/delete and sign in with Google, or e-mail and a password.
- You are signed out everywhere at once, and the account is deleted 14 days later. Sign in before then to keep it.
- Your vault, messages and connections are deleted.
- Hosts you visited keep the visit records they received until their retention ends.
- If you own an organisation with other members, transfer ownership first.
- Backups in your own Google Drive are yours: delete them there.
Can people search for me on HereMe?
No. HereMe is not a social network: there is no directory and no search. Someone who types your exact HereMe ID sees your display name and photo, and any organisation you chose to show on your ID. Everything else is seen only by the hosts and people you choose to share with.
Organisations and the console
How do I sign in to the console?
- On your computer, go to console.hereme.me.
- Open HereMe on your phone, tap Scan a code on the Pass tab and point the camera at the code.
- Check what your phone shows, then tap Approve.
Phone approval is on for every organisation unless its owner turns off Second factor: phone approval in the console’s Settings; then its members can also use the console with Google, or e-mail and a password. Either way, what you see depends on your role in the organisation.
You can sign a console browser out from your phone at any time: on the Pass tab tap your photo (My profile), then the gear (Settings), under Devices → Console browsers.
Someone sent me a QR code to scan to “log in”.
Don’t scan it. A console sign-in code is only ever on console.hereme.me, on a computer you are at and opened yourself. If you approve a code someone sent you, you sign them in to your account. HereMe never asks you to scan a code someone sent you.
Before you approve, your phone shows the browser and roughly where it is, and warns you if the computer seems to be in another country. If anything looks wrong, tap Deny. If you already approved, sign that browser out at once in the app’s Settings (Console browsers).
A guard’s tablet was lost or stolen.
In the console, open Gates & devices, find the device and choose Revoke. From then on HereMe accepts nothing from it — not even visits it recorded without a connection and had not uploaded yet: those are lost. If you still have the tablet, connect it to the internet first and wait until it shows nothing waiting to upload. Each guard identifies on the tablet with their own PIN.
To use a tablet again, enrol it with a new code. The account erase at account.hereme.me is for people’s own phones; it does not cover HereMe Gate tablets.
Talk to a person
Use the form, which reaches the team at once, or write to the address that fits. A member of the HereMe team will answer.
-
General
Questions about HereMe, organisations that want HereMe at their gate, partnerships and the press.
info@hereme.me -
Support
Help with the app, the console or HereMe Gate, and feedback from testers.
support@hereme.me -
Legal
The Terms, legal notices and formal requests. For your personal data, write to privacy@hereme.me.
legal@hereme.me -
Lost your phone?
Don’t wait for an answer: sign out everywhere at account.hereme.me. Found a security problem? Write to security@hereme.me.