A secure workspace for businesses to share private product catalogs with teams, distributors, sales reps, and clients — end-to-end encrypted, so only approved members can view them.
Carefully curated. Limited access.




Who it's for
Share internal service catalogs, wine lists, and staff-only reference materials with your team.
Publish invite-only product workspaces to approved buyers, brokers, and sales reps.
Show private lookbooks and seasonal collections to VIP clients and stylists.
Give partners and contractors scoped access to project assets without exposing them publicly.
Everything you need
Drag a folder or share from your camera roll — every image becomes a product instantly.
Share a private link, QR, or email invite. Revoke access with a single tap.
Add a name and reference if you want. Everything else — descriptions, tags — is optional.
Members reach you through an end-to-end encrypted chat. No third parties in the middle.
Our servers never see product names, images, or descriptions in plaintext. Ever.
Your personal passphrase unlocks a device-side vault key. Without it, nobody — not even us — can decrypt your workspace.
End-to-end encryption
Everything you upload is encrypted on your device before it leaves. We use audited, modern cryptography — X25519 for key exchange and AES-256-GCM for content. Revoke a member and their key is retired forever.
ciphertext = aead_encrypt( key: derive(sharedSecret), nonce: random(12), data: product, ) server.store(ciphertext) // opaque bytes member.decrypt(ciphertext) // in-app
How it works
Sign up with email and set a vault passphrase that unlocks your encrypted workspace.
Everything else is optional. Add a cover if you'd like.
Upload photos from a folder or camera roll. Each becomes a draft.
Private link, QR, or email. Approve manually or auto-approve.
Approved members see everything. Nobody else — not even us — can.
FAQ
Yes. Every product image, name, description, and note is encrypted on your device before it reaches our servers. We physically cannot read your content.
You send an invite via private link, email, or QR code. Only invited devices receive the keys needed to decrypt your catalog.
They lose access immediately, and their key is retired. New content is encrypted for the remaining members only — they can never decrypt future updates.
OnlyMenu IO is designed mobile-first, but the web app works beautifully on desktop and installs as a PWA on any device.
No. We literally can't — it's encrypted. And we don't monetize behavior. Ever.
Create your account now, or join the waitlist for product updates.
Create your account