Heyy-U
The Heyy-U Master Specification · Definitive Guide

What if the very screen that stole your evenings could hand you back a real Thursday afternoon with people two streets away?

A man sits alone in a warm room. In front of him: the glowing rectangle that has, for a decade, promised connection and delivered a feed. He lifts the remote — and this time the screen doesn't pull him deeper in. It points him out. Toward a reading circle, a Men's Shed, a five-a-side team, a neighbour who is also alone tonight.

Heyy-U turns the tools that isolated us into a doorway back to each other.
Simple. Measurable. Instant. Private.

A man using a remote to browse local Heyy-U connection groups on a television
Connection becomes a way out
Heyy-U 4 Connections 12 Tool Sharing Dog Walkers Elderly Reading Dementia Circles Men's Shed Co-founder Matching Safeguarded Dating Single Parent Exchange Solo Founders Allotment Shares Home Swapping Micro- Crowdfunding
"The thousand words the photo says: the person, the portal, and the way back."
THE HEYY-U MOMENT — passive consumption becomes physical outgress · Connections screen, live tile grid
How to read this document

This is the single source of truth for Heyy-U — the vision, the product, the architecture, the money, the go-to-market, and the roadmap. Every technical claim is tagged with an honest maturity marker: Live shipped and demonstrable · Designed specified, not yet built · Aspirational requires a partner or licence to become real. Show partners the vision freely. Disclose the tagged internals only after signature.


The Heyy-U DNA

Four words, held to on every screen, in every pitch, forever.

Whenever a decision is hard — a feature, a price, a partner term, a line of copy — it resolves against these four. If a choice makes Heyy-U less simple, less measurable, less instant, or less private, it is the wrong choice.

Simple
A text. No app.
Measurable
Real-world outgress
Instant
Under 60 seconds
Private
Number never shown
Human
Ends face-to-face
The one-sentence definition

Heyy-U is a consent-first human connection protocol that lets anyone reach anyone — a person, a community, a business, an event — by ordinary text message, using a sovereign @handle, with no app to download, no feed to scroll, no algorithm, and no data sold. We describe it as the Visa of human connection: not the bank, not the merchant, the rails in between that make a billion small transactions of trust possible.

What we are, and what we refuse to be

We are infrastructure

A transient routing layer between two consenting people. We hold no relational graph to sell. When a message has passed, the link decouples. We are the switch, not the destination.

We monetise utility, not attention

We charge per useful message and per functional transaction — never per eyeball, never per hour of engagement. A dormant handle costs almost nothing. A handle that helps people meet is where value lives.

We are private by construction

Privacy is not a setting we grant; it is the shape of the system. The sender never sees the recipient's number. We aim to hold the mapping only as long as a conversation is live. Suppression is silent — a non-answer, not a rejection.

We are done when people meet

Every other platform's success metric is time-on-app. Ours is the opposite: the moment two people agree to meet at 2pm on Thursday, we have succeeded and we get out of the way. We measure outgress, not engagement.


The problem we solve, simply

Loneliness is now infrastructure. So is the cure.

Two things are true at once. Screens have become the primary mediator of human contact — and the primary obstacle to it. The same rectangle that could summon a neighbour instead serves an infinite feed engineered to keep you seated and alone.

~10M
UK immigrants & diaspora with no single digital gathering point
1 SIM
already in every pocket — the only credential we need
0 apps
to download before a stranger becomes a neighbour
<60s
from a tile on screen to a verified real-world invitation

The attention economy discovered that loneliness is profitable. A feed that leaves you slightly emptier is a feed you return to. That is the shared adversary — quietly named, never shouted — behind everything Heyy-U does. We are not another walled garden competing for the same evening hours. We are the exit door, built on the humblest, most universal technology there is: the text message.

Why SMS, and why now

The reframe in one line

Netflix taught the world to stream film. Heyy-U teaches the world to stream connection — and download real life. The carousel of tiles on the screen looks familiar on purpose. But every tile, instead of pulling you deeper into the sofa, ends with you off it.


The core mechanic

The 60-second serendipity loop.

This is the whole product in four steps. A person sees a tile, presses one button, receives one text, replies once — and is now expected somewhere real. No app was downloaded. No password was set. No profile was built.

Flow 01Passive viewing → verified real-world invitation
SMART TV 1 · Passive viewing Cinematic interest tiles on the Connections grid. 07•• ••• 2 · Remote click Enter mobile number. Dropped from memory instantly. RELAY 26262 Reply YES to activate securely 3 · SMS handshake One text from the relay. Consent in a single reply. Welcome! We meet Thursday 2:00 PM. 4 · Real-world action From isolation to a verified local meeting. ZERO APPS · ZERO PASSWORDS · ZERO PROFILES
The interface drops the phone number from local hardware memory immediately after submission. Within sixty seconds a person moves from passive isolation to a verified, localised commitment. Designed

Why the loop bypasses the smartphone app entirely

The genius of the loop is what it omits. There is no onboarding funnel, no email verification, no "download our app to continue." The television becomes the discovery surface; the phone the person already owns becomes the secure channel; and the relay does the introduction. The heaviest thing anyone installs is a single reply.

OMIT 01

No app download

The barrier that kills community adoption is removed. Your grandmother can join a reading circle from her sofa.

OMIT 02

No stored profile

Nothing to breach, nothing to sell, nothing to regret having shared. Identity lives on the SIM, not in our database.

OMIT 03

No open feed

There is nowhere to endlessly scroll. The interaction has a beginning, a purpose, and an end — a meeting.


How it works underneath

The architecture, told honestly.

This section describes the system as designed. Some of it runs today; much of it is a specification that becomes real only with a mobile-network partner. We mark every layer so that no one — least of all us — mistakes the blueprint for the building.

Disclosure discipline

Commercial logic and live proof points are shown to anyone, before any NDA. The routing internals, handle-registry design, and MNO-integration model below are shown only after signature. This page is the internal master; the partner-facing versions redact accordingly.

Layer 1 · Identity mapping & anonymisation Aspirational

A standard text leaves a phone carrying its real number (MSISDN). In the designed system, that traffic reaches a gateway which maps the raw number to a handle-registry node and shields the real number from every other party. The sender only ever sees a handle.

Flow 02SIM-verified identity mapping engine
User phone raw +447••• SMPP Gateway relay 26262 @handle Network ingress Intercepts cellular SMS traffic directly from Tier-1 mobile network operators (EE, Vodafone, O2). Requires a wholesale carrier agreement — the single biggest dependency in the whole system. Identity decoupling The engine maps the raw number to a unique handle-registry node. The real number is shielded from public view. Mapping is designed to be cryptographically scrubbed and held only while a session is active. The privacy toggle Users control a real-time availability state. Setting 'suppressed' triggers a silent drop at the gateway — no error is returned to the sender, so a non-answer looks like silence, not rejection. No human friction.
Designed behaviour. The claim "intercepts Tier-1 MNO traffic" is contingent on a wholesale carrier deal that does not yet exist — treat it as the target state, not current capability. Aspirational

Layer 2 · One short code for millions Designed

We do not assign a unique number to every person — that would never scale. Instead a single relay routes everyone through an identity-translation layer. When one person texts another's handle, the system maps the verified incoming number to an active session and appends a session wrapper (for example, [From @tendai]), so countless two-way conversations run concurrently on one pipe without collision.

Flow 03Dynamic session binding on a single relay
Central relay 26262 identity translation layer User A User B stateful session loop
Text A→B is wrapped and routed so infinite concurrent conversations share one telco pipe without message pollution. The routing logic is designed and partially prototyped; carrier-scale throughput is unproven. Designed

Layer 3 · The comparison that frames everything

DimensionTraditional appsThe Heyy-U protocol
ArchitectureSiloed walled gardensNative SMS cellular layer
Data modelBehavioural harvesting & cookiesTransient proxy, minimal retention
IdentityEmail — bot-vulnerableCarrier-authenticated SIM / MSISDN
MonetisationAttention & ad exploitationUtility & micro-yield transactions
ObjectiveEndless passive scrollingPhysical community outgress

The system is designed to act as a structural firewall between two communicating parties — a decoupled routing layer that never needs to build a predatory relational database in order to make money. That is the architectural expression of the DNA.


Trust & safeguarding

A connection layer for the vulnerable has to be safer than the internet, not braver.

Heyy-U deliberately touches lonely people, elderly people, children's activity groups, grief and recovery contexts. That is precisely where a naïve "text anyone" system becomes dangerous. Safety is therefore not a feature bolted on; it is a set of gates every message passes through.

The tiered trust matrix & screening funnel Designed

Raw inbound texts are filtered before they ever reach a person. Language screening flags hostile or manipulative syntax at the switch. Beyond that, senders are sorted into trust tiers, and the most sensitive handles cannot even be activated without formal verification.

Flow 04Asynchronous screening → tiered trust
?a9#zk x!42q m0#8v raw, unlinked texts Language sentiment scrub Tiered trust matrix silent packet drop malicious payloads Tier 1 Trusted circle full messaging Tier 2 Verified community template messaging Tier 3 ⚠ Speculative stranger proxy only, screened background-check token gate
High-risk handles (e.g. anything touching childcare or youth) cannot be activated without enhanced background-check verification. Senders cannot inject custom scripts into verified community sandboxes — interaction is restricted to safe, pre-approved templates. Designed

The sovereign safety relay — the vehicle-plate case Designed

One flagship use — texting a vehicle by its number plate handle ("your lights are on") — is also the one most open to abuse. A stranger could use false urgency to lure a driver out of a safe place. The relay is built to defeat exactly this.

DAYTIME · 06:00–21:00

Trusted-context only, with a warning wrapper

A stranger texting a plate handle triggers a system-authored safety notice: "Unlinked sender — reply via proxy or press 999." The direct human message is never delivered raw.

NIGHT · 21:00–06:00

Temporal lockout & the 999 isolation protocol

If an unlinked stranger sends high-urgency language ('fire', 'open your window'), custom text is blocked entirely. The platform substitutes a sterile, authoritative message: "Do not leave your home. Check from a window." Natural human suspicion is backed by a telco-grade shield.

The safeguarding boundary in the visual identity

Even the artwork obeys the safety rule: interest tiles never feature identifiable human faces — only evocative objects (a leather football on wet grass, a candle, a garden trowel) representing the collective interest. This protects the user base and pre-empts regulator concern before it is raised.


The business model

The Pantheon: we monetise functional utility, never audience reach.

The cost model scales per useful message and per transaction, not per handle. A dormant handle is almost free — which is why we can give handles away and still make the economics work. High-status commercial demand and local supply chains cross-subsidise the public-good handles that will never be monetised at all. The tier names are a permanent framework.

Zeus
Public authority & global gateway — sovereign remittance and civic-scale handles (e.g. @flourish500).
Transaction levy / exempt
Aphrodite
The sovereign marketplace — viral moments, celebrities, high-status commercial demand.
Auction / £25k+ premium
Poseidon
Supply chains & marketplaces — local business handles and bot commerce (e.g. @harvest-bot).
Subscription + 1–3% fee
Artemis
Vetted community guardians — the public-good layer (e.g. @youth-safe-zone).
Exempt / cost-plus
Hermes
Personal proxies & vehicle plates — the everyday base of the pyramid.
Free / base £1.00
The cross-subsidy in one sentence

Aphrodite and Poseidon pay so that Artemis and Hermes don't have to. Rented commercial handles lease temporary access to the functional proxy switch only — they never see historic subscriber lists or SIM identities. Commerce funds the commons; it never gets to mine it.

The frictionless micro-yield loop via Direct Carrier Billing Aspirational

Where a transaction is involved — an entry fee, a ticket, a small donation to a community treasury — it settles on the SIM itself, not through a card redirect. This is the mechanism that turns everyday community activity into self-funding neighbourhood treasuries, and it depends entirely on a carrier billing agreement.

Flow 05Direct Carrier Billing micro-yield loop
1 · Intent trigger Phone texts "JOIN @zim-mri" to the relay 26262. 2 · SIM authentication Carrier billing engine verifies the active UK subscriber line. 25p 3 · Micro-charge + safe-drop shield 4 · Wholesale settlement Carrier 7% · Heyy-U 3% · 90% to the local cause node.
The safe-drop shield silently blocks a charge if the balance is zero, so no bounced-transaction fees or bank penalties are ever generated — a critical protection when serving low-income and vulnerable users. Requires GSMA carrier billing APIs. Aspirational

Unit economics, plainly

COST

Scales per message

Not per handle. Register a million dormant handles and the cost floor barely moves. This inverts the usual land-grab pressure.

REVENUE

Concentrated on high-intent senders

The handles that generate volume — marketplaces, events, businesses — are the ones that pay. Value tracks usefulness.

MARGIN

Commons stays free

Because commerce cross-subsidises, the food bank, the reading circle, and the grief mailbox never see a bill.


The discovery surface

Stream connection. Download real life.

The interface people see is a carousel of cinematic tiles that looks and feels like a streaming service — deliberately familiar, so no one has to learn anything. But where a streaming tile ends in more watching, a Heyy-U tile ends in a text, a handshake, and a meeting. The library already spans 100+ interests across sport, civic life, care, creativity, and commerce.

A · 1–15

Sport & fitness

Grassroots football, badminton, running groups, cricket, hiking — the low-friction on-ramps.

B · 16–30

Home & civic fabric

Allotment shares, tool circles, food banks, postcode noticeboards, neighbourhood watch.

C · 31–45

Care & vulnerable support

Elderly reading, dementia circles, grief mailboxes, Men's Shed, carer respite — handled with the most safeguarding.

D · 46–60

Professional & fintech

Freelancer clusters, co-founder matching, remittance, cooperative banking nodes, safeguarded dating.

Design system — permanent

Every tile shares two constants: the trademarked Doorway glyph (the arch with a centre dot, signalling universal SMS connectivity) top-left, and a category line-icon top-right. The variable is a high-definition, photoreal, object-only background. Palette: navy #0A1628, plum #5D1C6A, gold #C9A84C, teal #00B4A6, ember #D4541A. Type: Fraunces display, Inter body, IBM Plex Mono for data. (Original brand notes specify Playfair Display / Source Serif — this master uses a close, freely-embeddable pairing; swap to the licensed brand faces for production.)

Two surface behaviours worth singling out

The diaspora flag hub Designed

Replaces the passive "send us your videos" QR code on broadcasts. During a global tournament, a production desk can switch the on-screen master target to a specific national flag handle (e.g. @heyy-u234 for Nigeria), turning isolated fans texting in into a live, screened engine of national unity. Fan replies scroll as a sterile, screened ticker — never raw.

Un-surveilled talent discovery Designed

A rural inventor texts an idea to @submitbusinessidea. An automated NDA loop asks them to reply AGREE to lock a legal signature, then deposits a sterile abstract into a producer vault — bypassing social-media algorithms entirely and protecting broadcasters from unsolicited-IP lawsuits. Heyy-U retains the generic handle and leases the traffic flow for a season.


Go-to-market

Grassroots before institutions. Always.

The single most important strategic principle: large partnership conversations follow demonstrated community traction — they never precede it. The temptation is to lead with the BBC, the MNOs, the celebrity handle. The discipline is to lead with organisers who are drowning in group-chat admin and hand them something better.

The proven template

@zim-london — roughly 1,847 members across 12 UK cities — is the replicable proof point. It is not a slide; it is a living community reachable by text today. The entire GTM is: replicate that, 500 times.

The self-serve engine — the decentralised hack

Make the handle self-serve and make organisers the sales force. No business-development team, no pitch decks, no partnership gating for the core motion — just a handle name, a card form, and an SMS confirmation the organiser forwards to their existing group chat.

Flow 06Organiser-led growth loop
Create handle3 minutes, self-serve Pay monthly£9–25 · organiser only Get SMS confirmsetup in a text Forward to groupexisting WhatsApp Members joinword of mouth → every satisfied organiser recruits the next
The organiser is the customer. Members are the distribution. This motion needs no partner and can run today. Designed — build the self-serve form and it is Live-ready.

The number that unlocks every other conversation

500
active community handles
× 200
members each (the @zim-london shape)
= 100k
SMS-native, SIM-verified subscribers
→ everything
MNO, broadcaster, grant & investor talks

No mobile operator will license Heyy-U and no broadcaster will co-produce until there is a real, sizeable, verified subscriber base. You do not need them to get there. You need them after. Get to 500 handles first; the institutional doors open on their own.

Nearer-term funding & legal scaffolding


Partnership architecture

Every partner gets the vision. Only signed partners get the internals.

Heyy-U runs several partnership tracks in parallel, each shaped to the partner's own published priorities. The framing tool across all of them is a quietly-held shared adversary: the attention-extraction economy that monetises loneliness. We never shout it. We let the contrast speak.

The BBC route — infrastructure-for-equity

The proposal is a zero-capital MVP pilot on existing broadcast infrastructure. The BBC contributes a small engineering team and Ofcom sandbox sponsorship for a 90-day sprint; Heyy-U delivers the session engine, the tile library, and global format-licensing rights via BBC Studios. Crucially, the money firewall keeps revenue off the public screen: community treasuries belong to communities, and any commercial upside routes through BBC's commercial arm, keeping the public-service broadcast Ofcom-clean.

BBC inputHeyy-U deliversStructural guarantee
2 frontend engineersMiddleware session engineBrand in front; "technology by Heyy-U" credit
1 system architect150+ proprietary UI tilesMoney firewall — revenue off the public screen
Ofcom sandbox sponsorship (90-day sprint)Global format licensing via BBC StudiosCharter fit — conquers loneliness, serves regions equitably
The BBC World Handle Games

The flagship co-production concept: a diaspora-focused global tournament where national flag handles turn a broadcast into a live engine of connection across a 10-million-strong UK diaspora sublayer. It is the diaspora flag hub at Charter scale. Designed

The other live tracks

CHANNEL 4

Commercial variant

Revenue surfaced rather than firewalled — pitched via Partner Lab and indie co-development routes, tuned to a commercial public-service remit.

MNO LICENSING

O2/Telefónica · EE/BT · Vodafone

Full licensing proposal aligned to each operator's published innovation programme. This is the track that turns the Aspirational architecture into Live capability — and Lebara is the strongest mission-aligned MVNO for a first pilot.

JOINIT

Membership Intelligence Network

Heyy-U as the member-side layer, JoinIt as the organisation-side layer. An existing customer relationship becomes a partnership: their membership backend, our SMS reach.

CO-FOUNDERS

Sports & architecture

Structured term sheets for a sports-vertical partner and a chief-architecture partner. The sports vertical is the primary revenue engine — parent league handles (e.g. @lboro-league) capture entry fees and ticketing off the public screen, while team sub-handles stay organiser-owned.

The civic-value dashboard

For any public-service partner, Heyy-U offers something no ad-funded platform can: a bot-free public-value scorecard from day one. Every response is backed by a physical, carrier-authenticated SIM, so VPN spoofing and click-farms are neutralised. Reach, quality, real-world impact (physical outgress) and micro-treasury value can be stratified geographically without violating individual privacy. It measures serendipity as an auditable number. Designed


Closing thought
Closing — the thousand words, restated

Return to the man in the warm room. The old story ends with him still there at midnight, lit blue, alone. The Heyy-U story ends with an empty chair and a text on his phone: "Welcome. We're meeting Thursday at 2." Everything in this document — the relay, the tiers, the Pantheon, the roadmap — exists to make that one substitution: the screen that took people from each other, handing them back. Simple. Measurable. Instant. Private. Human.


Master contents

Everything in this file.