I'd build it on nostr. You have no infra costs, there already exists a network, and you can build whatever kind of client (privacy oriented in your case) you wa

I'd build it on nostr. You have no infra costs, there already exists a network, and you can build whatever kind of client (privacy oriented in your case) you want. You can also extend the schema as you propose/see fit.