Careers

Patepang is built and run by PT Pakuan Teknologi Pangrango, in Kabupaten Bogor. This is how we work, as our documents and code record it:

• Separate repositories, one job each. The phone app; the core on the phone, in Rust, which holds the keys and the encryption; the server, with its enclaves for tempel and recovery; tools for moderators and for the holders of the keys that sign the moderator list; and the websites.
• Decisions are written down. Every decision the specification does not already make is recorded as a numbered decision record (ADR): the question, the choice, the reason, and what changes if the decision is reversed.
• When in doubt, less on the server. The option that keeps more on the phone and less on the server is the one chosen.
• Two working languages. The documents of the app, the moderator tools, the key holders’ app and the websites are written in Indonesian; those of the core and the server in English.
• Done means the checks pass. A change is done when all its automated checks pass. Dependencies are pinned to exact versions, and every new dependency is recorded with its reason.
• Honest reports. A mock is never passed off as the real thing, and nothing is reported as working before it has actually been run.
• AGPL-3.0 license. The code of Patepang’s app, core and server is licensed AGPL-3.0-only, and it is opened to the public only after an external security audit (Licenses).

Meeting first.

A connection is only born from a tempel, when two people are face to face. Patepang serves relationships that are born from meeting, rather than replacing them.

Your content is locked on your phone.

Messages, updates, moments and photos are encrypted on the phone before they are sent, so the server cannot read them.

No bot accounts.

An account is only born through a tempel when meeting in person, without an e-mail address or phone number, and one phone can only create a few accounts a month.

No ads and no algorithmic feed.

Updates are in time order and the page comes to an end. Patepang’s income comes only from subscriptions and tips, and every feature is free.

Staying because it is comfortable, not because you are baited.

There are no unread counts, follower counts or rankings that bait people into coming back.

Honest about the state of things.

What is finished is kept apart from what is not, and what the server knows is said plainly.

Moderator

Moderators read reports in Indonesian and decide on them. A block proposed by one moderator only takes effect once a second moderator has reviewed it, and an appeal is reviewed by a moderator who took no part in the decision.

The work means reading and seeing heavy content: reports can contain harassment, threats, violence, fraud, intimate images shared without consent, and child sexual abuse material. The moderator console helps: images and videos stay blurred and grey until the moderator chooses to show them clearly, video and audio never play by themselves, and media in the child sexual abuse category is never opened in the console. By default, the console reminds the moderator to take a break every 30 minutes and asks for a 15-minute pause after 2 hours; moderators can change these numbers within set limits, but cannot turn them off. [Counselling for moderators: waiting for the owner’s decision]

Moderators’ names are never shown on any Patepang site. The published moderator list holds only the id, the public key and the languages each moderator reads, without names or e-mail addresses.

Other roles

[Other roles Patepang will need: waiting for the owner]

There are no openings now, so we are not taking applications. Please do not send a CV or other personal data: a CV is personal data, and we have not yet published a privacy notice for applicants.

When there is an opening, the role and how to apply will be announced on this site. Questions about working at Patepang can be sent to [email protected].