News & stories from Tula.

Protecting Your Identity and Money on Tula

Attackers don't earn your trust — they borrow trust someone else built. Why signing in, trusting a device and moving money are three different things.

How we handle a new VPS

When you purchase a new VPS, it is tempting to think of it as an empty server waiting for you to deploy your application.

How We Built Decrypted Push Previews Without Putting Message Content in Push

A generic-first Android notification architecture that keeps push payloads minimal and performs authenticated, device-specific decryption locally.

Exactly Once Decryption in an At-Least-Once Messaging World

How Tula designed a crash-safe receive path where duplicate delivery is normal, but cryptographic state advancement happens at most once.

From seven seconds to 226 milliseconds: document previews under end-to-end encryption

How Tula opens Word documents, slide decks and spreadsheets entirely on your phone — because our servers can't read them, and never will.

We load-tested our Go backend to 2,000 concurrent WebSockets. The app wasn't what broke

Our backend is deliberately boring: a single Go monolith on a 4-core VPS in Nairobi, PostgreSQL on the same box, nginx in front.

The Corpse Space: How We Chased a Crackle Through Three Different Bugs

There's a particular kind of dread that comes from hearing "there's no audio" about a feature you just spent weeks building.

Debugging Live Audio at Scale

A few weeks ago, a back-of-envelope calculation told us that scaling Tula Spaces to 100,000 concurrent listeners would need roughly 100 small VPS boxes.

Welcome to the Tula blog

Product updates, announcements and stories from the team building Africa's everyday super app — starting here.