LifeGround Community · VoteBoxApp

Revenue Model & Build Plan

Written in plain language — no prior blockchain knowledge assumed

Before we begin

This document explains how VoteBoxApp can pay for itself, stay affordable for poor communities, guarantee the founder's share permanently, and eventually hand control to its community — and what it would actually take to build.

Technical terms are explained the moment they appear, in blue boxes like the one below. Nothing has been simplified away; the detail is all here, just unpacked.

Blockchain A shared public record book that many computers keep copies of. Once something is written in it, it cannot be quietly altered or deleted. VoteBoxApp uses the Cardano blockchain.
What's in here
  1. How proposals get priced — and why the poorest pay least
  2. Protecting everyone from ADA's price swings
  3. What happens when more people vote than expected
  4. Guaranteeing the founder's share forever
  5. What can actually be built — and the one hard problem
  6. Who needs a crypto wallet (and who doesn't)
  7. Money projections
  8. Risks, build order, and a glossary

1 · How proposals get priced

Voting is always free. Only the person who creates a proposal pays. The question is how much.

Why a single flat price fails

Charging everyone the same amount — say 20 cents per proposal — sounds fair but isn't:

The solution: price by how many people will vote

Charge according to the size of the group the proposal is put to — not according to who is asking. When creating a proposal, you declare roughly how many people are eligible to vote on it. That declared size sets the price.

This is fair automatically. Small local groups with few resources land in the cheap tiers. Large institutions land in the expensive ones. And crucially, the platform never has to ask anyone how much money they have — which would be both intrusive and easy to lie about.

TierPeople who can votePrice≈ in euros
Microup to 50$0.10 — in practice free€0.09
Community51 – 500$0.50€0.44
Municipal501 – 10,000$2.00€1.75
Regional10,001 – 100,000$8.00€7.02
Nationalover 100,000$25.00€21.93

The finding that makes this work

Because a handful of large proposals bring in most of the money, the cheapest tier can be made almost free at virtually no cost to the organisation:

share of all proposalsshare of all revenue
Just 7% of proposals bring in 61% of the money. Lowering the Micro price from 16 cents to 10 cents changes total revenue by under 3%. So making the platform genuinely affordable for the poorest users costs almost nothing — the large institutions quietly pay for it.

Compare the two approaches directly. The poorest users end up paying less than before, while the organisation earns roughly nine times more overall:

Old flat modelNew tiered model
Cheapest proposal costs$0.16$0.10 (or free)
Average revenue per proposal$0.16$1.48
Proposals needed for $10,000/month~62,500~6,800

Suggestion: launch with just three tiers (Micro / Community / Institutional) rather than five. Simpler to explain, cheaper to check for errors, and more tiers can be added later without breaking anything.

Three layers of affordability

Cheap prices are the first layer. Two more make affordability reliable rather than merely low:

Layer 1 — Progressive tiers The base price for a small community proposal is set lower than the cost of a text message.
Layer 2 — Sponsorship Anyone can pay for someone else's proposal. A charity, a wealthier partner town, or a family member abroad can cover the fee. Affordability becomes something the community can solve for itself.
Layer 3 — The Solidarity Pool A fixed slice of the organisation's income (suggested 10%) is set aside to automatically pay for Micro-tier proposals from low-income regions. Growth funds accessibility by itself. By year three this pool alone could cover well over 100,000 free proposals.

Together these mean the answer to "can a poor village afford this?" is never "it depends" — it is "yes, and if not, the platform pays for them."

2 · Protecting everyone from ADA's price swings

ADA The currency of the Cardano blockchain. Like any cryptocurrency, its value against the euro or dollar moves constantly — it has ranged from under $0.15 to over $3.00 in past years. Today it is around $0.16.

This volatility is a serious problem, and the fix is surprisingly simple once you see it.

The trick: which number you write down

At the moment the fee is defined in ADA — "1 ADA per proposal." The amount of ADA is fixed, so its real value floats up and down with the market. The organisation's income becomes a bet on the crypto market.

Flip it around. Define the fee in dollars — "$0.50 per proposal" — and let the amount of ADA change to match. Now the real value is fixed and only the ADA quantity moves:

If ADA is worthOld way: always 1 ADANew way: always $0.50
$0.16organisation gets $0.16creator pays 3.125 ADA → $0.50
$0.50organisation gets $0.50creator pays 1.000 ADA → $0.50
$1.00organisation gets $1.00creator pays 0.500 ADA → $0.50

The old way produces a six-fold swing in income for reasons that have nothing to do with how well the platform is doing. The new way produces a steady figure.

How the app knows the exchange rate

Price oracle A service that publishes the current ADA exchange rate onto the blockchain itself, so that automated blockchain programs can read it. On Cardano the main ones are Charli3 and Orcfax. Think of it as a price board that the vending machine can see.
But you probably don't need an oracle at first. A much simpler option: the organisation publishes an ADA price table and updates it weekly or monthly. No outside dependency, no subscription fees, and nothing extra that can break or be manipulated. The only downside is a small lag between updates, which safety limits absorb easily.

This removes the riskiest single component from the early build. Add a real oracle later, only if the lag starts causing problems.

Whichever is used, set a hard floor and ceiling in ADA terms, so that a broken or manipulated price feed can never produce an absurd charge. And use an average price over time rather than the instant price, to smooth out momentary spikes.

Two things pegging does not fix

Gas fee The small charge the blockchain itself takes to record a transaction — like a postage stamp. It is always priced in ADA by the network, and nobody can change that. Currently about 0.17–0.20 ADA (roughly 3 cents) for a vote record.
Problem 1 — gas is still tied to ADA. If the creator pays the gas on top of the fee, their total bill still moves with the market. This bites hardest at the cheapest tier: today a Micro proposal costs 10 cents fee + 3 cents gas. If ADA reached $1.00, that becomes 10 cents fee + 20 cents gas — the postage would cost twice the product, exactly where affordability matters most.

The fix: the organisation pays the gas for Micro-tier proposals out of the Solidarity Pool. The cheapest tier then has one stable, promisable price no matter what the market does.
Problem 2 — money already received still floats. Pegging fixes the value at the moment it arrives. If the organisation then holds ADA and the price halves, its savings halve with it.

The fix: a standing policy of converting part of income — say 60% — into a stable digital currency (one that holds a fixed dollar value), keeping 40% in ADA to stay aligned with the Cardano ecosystem.
In short: pegged going in, hedged coming out. Two separate protections for two separate risks.

3 · When more people vote than expected

Someone declares a Community proposal for 500 people. It catches on and 3,000 people vote. What happens?

Why asking voters to chip in doesn't work

The natural idea is to let the extra voters contribute a few cents each. The arithmetic kills it:

Shortfall to next tierExtra votersEach would oweGas to send it
$1.502,500$0.0006~$0.027
The postage costs about 45 times more than the payment. Thousands of tiny blockchain payments are economically absurd. Crowd-funding the shortfall cannot work as "everyone chips in a little."

It works in two other forms instead:

There is a principle here. Going over your expected turnout means the proposal succeeded — which is exactly what the platform exists to make happen. Blocking 2,500 votes over $1.50, or sending someone a bill for being popular, would be perverse.

The clean solution: settle at the end, not the start

Treat the declared tier as a deposit rather than a final price. When voting closes, the system compares what was declared against what actually happened:

What happenedWhat the system does
Fewer voters than declaredRefund the difference down to the correct tier
Somewhat more (within one tier)Absorbed silently. The creator is never even told
Enormously moreTop-up needed before final results publish — but votes are never thrown away, and a sponsor can step in

The refund is what makes this fair. Because guessing too high costs you nothing, nobody has any reason to deliberately under-declare to save money. Honest estimation becomes the easy choice in both directions.

Stopping abuse, using reputation

SBT — Soulbound Token A permanent, non-transferable badge attached to a user account, recording their standing on the platform. VoteBoxApp's tiers are Seed → Sprout → Branch → Root. Unlike normal crypto tokens, they cannot be sold or given away — they are earned.

The obvious cheat is to always declare Micro and let the organisation absorb the overflow every time. Reputation solves it neatly:

Repeatedly under-declaring damages your standing. This gives the reputation system real practical weight instead of being decorative.

4 · Guaranteeing the founder's share forever

Smart contract / validator A small program stored on the blockchain that automatically controls money according to fixed rules. Once deployed it runs exactly as written and — if built without an update mechanism — nobody can ever change it, including the person who wrote it. Think of a vending machine that is physically incapable of giving the wrong change. On Cardano these are written in a language called Aiken.

The Perpetual Founder Fee (PFF) is the founder's permanent share of platform income. The promise is only as good as its enforcement — and right now it is enforced only by ordinary app code, which could be changed by anyone who controls the software.

Proposalcreator Sponsoroptional SolidarityPoolcovers Micro SMART CONTRACT immutable · cannot be altered by anyone splits every payment automatically DAO Treasury 90% community funds Founder (PFF) 10% permanent share 10% of treasury refills Solidarity Pool Voters pay nothing · need no wallet Foundation Relayer submits votes on their behalf Voting is always free — only creating costs money
How money moves through the platform

The conflict — and how to resolve it

There is a genuine tension. If everything is frozen permanently, the future community-run organisation has no real power and is decorative. If nothing is frozen, the founder's share is just a promise that a future vote could delete.

DAO — Decentralised Autonomous Organisation An organisation governed by its members voting directly on the blockchain, rather than by a board or an owner. The long-term plan is for VoteBoxApp to be run this way.
The resolution: freeze the percentage, not the amount. The smart contract permanently hard-codes "10% goes to this address" with no possible update. But it leaves every other decision — prices, tier sizes, policies — to the community vote.
Frozen forever — no key, no update pathDecided by community vote
Founder's share: 10% of platform incomeThe price of each tier
The founder's payment addressThe size boundaries of each tier
Treasury share: 90%Where the exchange rate comes from
The split runs on every single paymentSolidarity Pool percentage
How much income is converted to stable currency
Why this is elegant: because the founder receives a percentage rather than a fixed sum, the founder and the community are never in conflict. If the community raises prices, both gain. If the community lowers prices to help poor users, both give up the same proportion. There is no possible setting where the founder profits at the community's expense, or the reverse. The fairness is built into the structure rather than promised in a contract.

This also settles the long-standing question of awkward split percentages. A 90/10 division is a whole, clean, easily audited number — which matters a great deal for something that can never be corrected once deployed.

5 · What can actually be built

Now the engineering reality. There is one hard problem that reshapes the whole build order, and it is better to meet it now than after six months of work.

A blockchain program cannot count votes.

Smart contracts on Cardano can only see the single transaction they are checking, plus a few specifically attached references. They cannot search back through history or tally up past transactions. Since votes are currently recorded as notes attached to many separate transactions, a smart contract has no way to know how many votes a proposal received. "Settle at the end" therefore cannot simply be written into a contract and expected to work.

Three possible ways around it

UTxO Cardano tracks money as discrete chunks — like physical banknotes — rather than as a running account balance. Each chunk can carry a label (a "datum") holding extra information. A smart contract controls specific chunks and the rules for spending them.
ApproachHow it worksVerdict
Record every vote individually on-chainEach vote becomes its own blockchain entry, so they can be counted directlyImpossible — about 3 cents of gas per vote. Free voting would be destroyed.
Running tally chunkOne "scoreboard" held by the contract. Votes are gathered into batches, and each batch updates the scoreboard. The contract checks the tally only ever goes up, and that the batch was folded in correctly.The right answer — one postage fee per batch rather than per vote, so voting stays free. It also fits the vote-batching design already planned.
Trusted declarationThe platform's own server signs a statement of the final count and the contract accepts itSimple, but the count is trusted rather than proven
Merkle tree / Merkle root A way of compressing a long list into a single short fingerprint. Anyone can prove a particular item was in the list without revealing or re-listing everything else. It is how thousands of votes can be summarised in one small blockchain entry.
Two honest limitations of the running-tally approach.
Queueing. Only one transaction can update the scoreboard at a time. Regular batching is fine, but very high volumes would require splitting the scoreboard into several parallel ones.

The batcher could leave votes out. The contract can verify the arithmetic was done correctly, but not that every vote was included. This is unavoidable in any design where voters don't personally sign on the blockchain — which is the price of keeping voting free. The money becomes fully trustworthy; the vote count remains partly trusted. Be precise about this in grant applications: claim trustless fee splitting, not trustless voting.

The insight that saves months of work

The founder's guarantee does not depend on counting votes at all. The split applies to the fee, which is paid when the proposal is created — long before anyone votes. These are two completely separate jobs, so they should be two separate programs.
CONTRACT A Build this first CONTRACT B Defer — maybe forever Takes the fee Splits 90 / 10 Pays treasury + founder Needs no vote data Counts votes Compares to declared tier Handles refunds + top-ups Needs running tally ~40–80 lines of code 1–2 weeks cheap to audit LOW RISK complex, queueing issues 6–12 weeks expensive to audit HIGH RISK
Splitting one hard program into an easy one and a hard one

Build Contract A first. It delivers the on-chain founder guarantee — the headline grant milestone — and it stands on its own even if Contract B is postponed indefinitely.

Storing the proposal text

IPFS A shared filing system spread across many computers, used to store the actual text and images of proposals (which would be far too expensive to put on the blockchain). Each stored item gets a reference code called a CID, and only that short code goes on the blockchain.

Two things must be right here:

6 · Who needs a crypto wallet

Crypto wallet An app holding the secret keys that control someone's blockchain funds — for example VESPR on mobile. Setting one up is a real barrier for ordinary users: it requires understanding seed phrases, buying currency, and keeping keys safe.
Foundation Relayer VoteBoxApp's current arrangement: the organisation's own wallet signs and submits transactions on users' behalf. This means a user with no wallet, no cryptocurrency and no technical knowledge can still take part.
Adding wallet support does not replace the Relayer — the two work side by side, permanently. The Relayer is not a temporary shortcut to be outgrown. It is the single biggest accessibility feature the platform has, and it should never be given up.
NO WALLET NEEDED WALLET NEEDED Voterseveryone who votes Proposal creatorspaying their own fee Micro-tier creatorsSolidarity Pool pays Sponsorspaying for others Foundation Relayer signs on their behalf Own wallet VESPR / WalletConnect A wallet is only ever needed when money leaves a user's own pocket
Who needs a wallet, and who never does
An elegant side-effect: the need for a wallet rises in step with the amount of money involved — which tracks how organised and resourced the user is. A village doing a Micro proposal is covered by the Solidarity Pool: no wallet, no money, no barrier at all. A city council paying $2.00 clearly has the capacity to manage a wallet. The same progressive logic as the prices themselves.

So yes — start wallet integration now, but build it as strictly optional. The app must remain fully usable with no wallet connected. Anything that breaks without one has been built the wrong way round.

Expect this to be fiddly. The standard Cardano wallet connection method was designed for desktop web browsers, not phones. Mobile requires newer approaches (VESPR's mobile support, or WalletConnect). Inside a React Native / Expo app this is the most awkward item on the whole roadmap. Budget 3–6 weeks, not one.

7 · What the money looks like

Average income of $1.48 per proposal, and — because prices are pegged — these figures no longer move with the ADA market. Two growth scenarios are shown: a cautious one and a faster one. Both slow down and level off over time, as real adoption does.

TargetProposals per month neededCautiousFaster
$1,000 per month~680month 9month 3
$5,000 per month~3,400month 25month 13
$10,000 per month~6,800month 34month 18

Under the old flat fee, $10,000 a month would have needed around 62,500 proposals — realistically unreachable. Here it needs about 6,800.

AfterProposalsTotal incomeFounderTreasury
Cautious scenario
Year 1~7,100$10,436$1,044$9,392
Year 2~31,800$46,880$4,688$42,192
Year 3~100,700$148,503$14,850$133,653
Year 5~393,800$580,851$58,085$522,766
Faster scenario
Year 1~17,000$25,023$2,502$22,521
Year 2~116,700$172,123$17,212$154,911
Year 3~429,900$634,072$63,407$570,664
Year 5~1,363,500$2,011,149$201,115$1,810,034
TreasuryFounder

The first year remains modest — roughly $1,000–2,500 to the founder. That is entirely normal for a new organisation, but it must be said plainly: grants and the NFT programmes are structural rather than optional for the first two to three years. The honest framing for funders is that fee income is designed to replace grant dependency over a three-year horizon, not to avoid it from the start.

8 · How hard is all this to build?

TaskTimeRiskNotes
Tier pricing in the existing app codeDaysLowTest the assumptions before touching the blockchain
Manually updated ADA price tableDaysLowAvoids needing a price oracle entirely
Contract A — the 90/10 split1–2 weeks + reviewLowBest value for effort in the whole project
Wallet connection on mobile3–6 weeksMediumEnables sponsorship and top-ups
Live price oracle2–4 weeks + running costMed-highSkip in the first phase
Contract B — settle at the end6–12 weeksHighRunning tally, queueing, fingerprint checks
Reputation-based allowancesBlockedHighNeeds the SBT badges on-chain first

The first four rows are realistically 2–3 months of focused work and produce a working tiered system with a genuine on-chain founder guarantee. The complete vision is nearer 9–18 months, and Contract B is where the difficulty genuinely escalates.

Suggested order of work

Phase 0 — tidy up

days

Settle the split at a clean 90/10. Correct the README so it describes the blockchain enforcement as planned rather than existing. Push the recent local work to the public repository so it reflects reality.

Phase 1 — tiers in ordinary app code

2–4 weeks

Implement the tier prices with a manually maintained rate table. Then run a real local campaign and measure what mix of tiers actually occurs. This assumption drives every revenue figure in this document and is currently completely untested.

Phase 2 — Contract A and wallets, in parallel

4–8 weeks

Build and independently review the permanent split contract — the headline grant milestone. At the same time, add optional wallet connection. Neither blocks the other.

Phase 3 — settle at the end

3–6 months, only if justified

Running tally, refunds, top-ups. Only worth building if Phase 1 shows that misdeclared tiers actually cost meaningful money. Until then, quietly absorbing the difference is far cheaper than the engineering.

Phase 4 — hand over to the community

when governance is ready

Transfer the adjustable settings to community control. The permanent core needs no handover, because it was never anyone's to change.

9 · Risks worth stating plainly

The tier mix is a guess. The assumed spread of proposal sizes drives every revenue figure here. If large institutions never adopt the platform, average income collapses towards the Micro price and the model badly underperforms. This is the single most important thing to measure in a real campaign.
Vote counting is not fully trustworthy. Any batching design leaves whoever assembles the batches able to leave votes out. Be precise in grant applications and documentation: claim proven fee splitting, not proven voting.
Permanent means permanent. The 90/10 split and the founder's payment address, once deployed, can never be corrected — not by anyone, for any reason. Both technical and legal review before that moment.
Complexity is the main enemy. Five tiers, a price oracle, refunds, top-ups, a solidarity pool and reputation allowances add up to a large amount that can go wrong. Every component postponed is a reduction in cost and failure risk.
The price oracle is an outside dependency. Relying on an external price feed introduces something the platform does not control into an otherwise self-contained system. This is why the manual rate table is recommended first.

Glossary

ADAThe currency of the Cardano blockchain
AikenThe programming language used to write Cardano smart contracts
BlockchainA shared public record that cannot be quietly altered
CIDThe short reference code for a file stored on IPFS
DAOAn organisation run by its members voting directly, rather than by an owner or board
DatumA small label of information attached to a chunk of blockchain money
Gas feeThe network's own charge for recording a transaction — like postage
IPFSA shared filing system for storing proposal text and images off the blockchain
Merkle rootA short fingerprint summarising a long list, allowing proof of membership
OracleA service publishing outside information (like exchange rates) onto the blockchain
PFFPerpetual Founder Fee — the founder's permanent 10% share
RelayerThe organisation's wallet, submitting transactions for users who have none
SBTSoulbound Token — a permanent, non-transferable reputation badge
Smart contractA blockchain program that controls money by fixed, unchangeable rules
StablecoinA digital currency designed to hold a steady value against the dollar or euro
TreasuryThe community fund receiving 90% of platform income
UTxOA discrete chunk of blockchain money, like a banknote rather than a bank balance
VESPR / WalletConnectWays for a phone app to connect to a user's own crypto wallet