Features
Every feature, called out.
We build slowly, on purpose. Every feature in Shoal is here because we thought a family would need it. Here's what's in the app today.
-
Multiple families, one account
Belong to as many families as your life requires. Switch between them with a tap.
Read the deep dive
-
Kids without an email address
Children don't need an email or a password to use Shoal. An admin adds them to the family, and they appear in the picker on every family device.
Read the deep dive
-
Family devices
An admin signs in on a shared phone or tablet, marks it as a family device, and the children in the family can use it to chat.
Read the deep dive
-
Admin oversight, by design
Family admins can see children's conversations because the cryptography is built that way — not because of a back door.
Read the deep dive
-
Time limits and schedules
Set the hours when chat is available — different rules for weekdays, weekends, and school holidays — so screen time has a clear beginning and end.
Read the deep dive
-
Cross-family connections
Two children can chat across families — when both sets of admins say yes.
Read the deep dive
-
Optional moderation
Block links, block or flag specific words — set per child, off by default. A second layer alongside admin oversight, only when you want it.
Read the deep dive
-
Message statuses you can trust
Queued, sent, received, read. Every message tells you exactly where it is — whether you're online, your recipient is online, or you're both on different trains.
Read the deep dive
-
Voice notes
Record a message, send it like any other. Transcription is optional and happens on your device — our servers never see decrypted audio or text.
Read the deep dive
-
Works when the internet doesn't
Read your last conversations, write new messages, send them when you're back online. Shoal stays useful through tube journeys, school Wi-Fi blackspots, and that bit of the kitchen where the signal dies.
Read the deep dive
-
Install on any device
Shoal is a Progressive Web App. Install it, get push notifications, work offline. No store required.
Read the deep dive
-
Real-time push notifications
Get notified when it matters. Without any of your messages passing through a third-party push service in plaintext.
Read the deep dive
-
Strong encryption, explained honestly
Messages are encrypted on the sending device and decrypted on the recipients'. Almost everything else we store is encrypted at rest. We're upfront about the one architectural caveat that's worth knowing.
Read the deep dive
-
Magic-link sign in
No passwords. No "what was my password" tickets. No password reuse risk.
Read the deep dive
-
Sessions you can revoke from anywhere
See every signed-in device on your account. If a phone is lost, stolen, or just sold, lock it out — open connections close the moment you revoke, offline ones can't reconnect.
Read the deep dive
-
Leave or delete, on your terms
Leave a family. Delete a family. Delete your whole account. Each one is a few taps, an email confirmation, and — where it matters — a clear warning about anything that can't be undone.
Read the deep dive