Starling is private location sharing for your circle: family, a partner, a small group of friends. There is no account to make and no company sitting in the middle reading your position. <b>End to end encrypted</b> Your location is encrypted on your device with AES-256-GCM under a key derived from a 32-byte secret that only exists in your invite link, in the part of the URL browsers never send to a server (the fragment). The relay stores ciphertext it cannot read. Names, avatars, and statuses ride inside that same ciphertext. <b>Nothing to sign up for</b> No phone number. No email. No push tokens. Starling runs no analytics, no crash reporting, and makes no third party requests. The only thing it fetches from outside its own server is OpenStreetMap map tiles, and only if you leave the street basemap on. Switch to the Off-grid basemap and the app draws the map locally, with zero network requests. <b>A zero-knowledge relay</b> The relay is a small server that moves ciphertext between your circle's devices. It sees channel ids, message sizes (padded to a fixed length so they carry no information), timing, and IP addresses, but never a position, a name, or who is in your circle. Every row expires after 24 hours and there are no backups by design. <b>Panic wipe</b> One action clears the app: local storage, cached data, everything. If you need to disappear from a circle fast, this is the button. <b>App lock</b> Optional passcode lock encrypts your circle secret at rest (PBKDF2-SHA-256, 600k iterations). Where the device supports it, your fingerprint or face opens the vault through the Android Keystore, which never leaves the secure hardware on your phone. <b>Circles, plural</b> Keep one circle for family and another for the friends you split up from at a fair or a concert. Switch with a tap on the circle name. Every circle has its own key and its own identity, so even the relay cannot tell your groups apart. <b>SOS and check-ins</b> Hold to fire an SOS that your ci