Roadmap
Done
- Mail service, api and PostgreSQL schema, with the spec's tests.
- Web client, one-screen sign-in and the
/register/portal, live at https://mail.phonemail.net. - SMS sign-up (
JOIN, QR codes) with signed Twilio webhooks; OTP by Twilio Verify (SMS only). - Mail with Gmail and every other provider, in both directions, DKIM-signed.
- Webmail (Roundcube) over PhoneMail's own IMAP and SMTP submission.
- Password change in the apps, the web client, webmail and the admin tool.
- Native iPhone and Android apps (in testing).
- The welcome page at https://phonemail.net and this documentation, with the API in OpenAPI 3.1.
- Call-in sign-up: call the PhoneMail number and press 1 (Twilio voice webhook; PhoneMail never places calls).
- SMS alerts in the brief's wording (
You have received an email from <Sender>. Subject: <Subject>.) for people who don't use the app; the api marks app users automatically. - Attachments: upload, send, receive, download; stored on the NVMe drive; included in email to other providers and over IMAP.
- Profile pictures: the generated number bloom by default, 16 stock glyphs in 8 colours, or an uploaded photo.
- Hindi and Tamil translations; contacts access during onboarding in the apps (one explainer screen whose Continue always leads to the system prompt; contacts stay on the phone).
- Watch apps: Apple Watch, and Wear OS (signed in by the Android app over the Data Layer).
- Google Play closed testing ("Alpha" for phones, "Wear Alpha" for Wear OS), open in every country Play offers; iPhone app submitted to App Store review.
Next
| Item | Notes |
|---|---|
| App stores | App Store approval; Google Play production access (needs at least 12 testers opted in for 14 days) |
| Push notifications | Firebase Cloud Messaging (Android) and APNs (iPhone); needs the Google Play and Apple developer accounts |
| Deliverability | A sending relay with an established reputation, so first emails to Gmail don't land in Spam |
| Operations | Nightly PostgreSQL backup, container log limits, uptime alerting |
| Security | Rate limits on login and OTP, token revocation, Twilio token rotation |
| More languages | Beyond English, Hindi and Tamil |