Pupul is not a portfolio of products. It is one continuity file, portable, consented, revocable, and non-backfillable, with a different room built on top for each real audience. A coach's room asks different questions than a parent's room, but underneath both is the same append-only record, owned by the same person, with the same right to revoke.
Nothing here is a promise. Read the public revocation list, check a signed checkpoint, or read the patent application yourself.
Every room below is built the same way: one primitive, one template on top. The primitive is what makes a record worth trusting. The template is what makes a room fit the person using it. Only one of those two things is allowed to change room to room.
Append-only. Cannot be backdated. Signed and checkpointed the moment an entry is written. Owned by the person it describes, never by the room they used to write it. No template, in any room, is allowed to touch this.
What a room asks for, how often, what counts as a milestone, what a handoff looks like, and what a printed or exported version reads like. A coach's room and a parent's room ask nothing alike, on purpose. That is the whole reason each one gets its own page.
A grant carries only the shape of what was agreed to share, never the content. Revocation is published where anyone can check it, and it works the same way whether the room is a coaching practice or a child's file. This is the engine's, not a feature a room can opt out of.
Each card below is a real page reading a real, working part of the engine. None of this is a mockup or a waitlist.
A client hands you their file before session one. Free software, first client read free, then per-read after that.
Open the practitioner room → PersonalOne record you own and hand to any AI, instead of re-explaining yourself to every new chat. Free to start.
Open the personal room → Firms & agenciesA multi-practitioner license so a client's history survives a consultant leaving the firm. $999 a month.
Open the firm room → Child & familyA guardian starts and tends the file. Ownership transfers to the child at majority, automatically, intact.
Open the family room → DevelopersA person grants your app a scoped, signed block of their own record. Verify it offline. Free tier to start.
Read the developer docs → Teams & organizationsAggregate-only, k-anonymity floor of five. Nobody's individual file is ever visible to the org that sponsored it.
See the team pilot → ResearchersA record that existed before the study, and cannot be backfilled, is what a captcha or an ID check cannot produce.
See the research surface →Every row below is a real job we intend to serve. Two of them are built and held, because the page promises a template that onboarding does not route to yet, and we would rather delay a page than publish one whose signup path contradicts it. The rest have no page at all: either the template has not been written, or in one case, the law it depends on has not been built. A surface publishes only when a genuinely different template exists and the path a visitor actually takes leads to it.
Each one names the other tool's real strength in its own words, cites every number, and says plainly where that tool is still the better choice.
Practice Better is a full EHR for health professionals. Fair note on when it is still the right tool.
Read the comparison → ComparisonPaperbell runs scheduling, payments and contracts for coaches. Pupul does not compete with any of that.
Read the comparison → ListiclePaperbell, CoachAccountable, Simply.Coach and Bonsai, verified, plus where Pupul fits differently.
Read the roundup →If a room could weaken any of this to fit a market better, it would stop being the same product. None of it is negotiable, whatever the template on top asks for.
Every room writes forward in time only. Nobody, including us, can insert or edit an entry dated in the past.
The ledger publishes signed checkpoints anyone can verify offline, in any room, without asking our permission.
Every revoked grant is published to a list anyone can read, in every room, including the count.
A claim no room can evidence comes back null. Nothing here reads absence as a finding, in any room.
A grant carries the shape of what was agreed to share, never the content. This is true in every room, including a coach's or an employer's.
How a person yields under pressure is sealed by construction. It is absent from every read that leaves them, in every room, not withheld by policy.
There is no logo wall or customer count on this page, because there is nothing honest to put there yet. What there is instead is a mechanism you can run without trusting us.
Personal, child and family, practitioner, or organization. Same record, same consent rail, same right to revoke, whichever room you start in.