Your data, guarded by design
Encryption in transit and at rest, locks that seal data on your device before it leaves, and an assistant that can never read what you keep private.
Encrypted wherever it goes
Everything between your devices and our servers travels over encrypted connections (TLS), and our infrastructure providers encrypt the data they store.
Your account, kept apart
Row-level security rules check every request against your account, so each account’s data stays separate, and only the people you share something with can see it.
Locks that seal on your device
An encrypted lock gives a tab its own random 256-bit AES-GCM key and seals the tab’s rows and files on your device before they sync. Our servers only ever hold ciphertext.
A master key we never see
Your master key is turned into an encryption key on your device with PBKDF2 (SHA-256, 310,000 rounds). It is never sent to us, so we cannot read, reset or recover it.
An assistant with limits
The assistant can never read your Vault, your medical records or a tab under an encrypted lock, and the AI keys you add stay on the device you entered them on.
No ads, no data sales
Nothing you record is sold, used for advertising or used to train AI models.
The details
How are passwords stored?
Sign-in is handled by our authentication provider, Supabase, which stores passwords securely hashed. We never see them.
What happens when I delete something?
It is removed from our active systems straight away. Encrypted backups, kept for disaster recovery, are overwritten within about thirty days.
What do crash reports contain?
Technical details and your account ID, sent to Sentry so we can find and fix problems. They never include the content of your entries.
How is a Google Calendar connection kept?
The long-lived token is encrypted at rest on our servers and is never sent to your devices. You can disconnect at any time in Integrations.
Who provides the infrastructure?
Supabase runs authentication, the database, file storage and sync; Vercel hosts the web app. The Privacy Policy lists every provider and what each one does.
What if I lose my master key?
Nobody can recover it, us included, so anything sealed with it is lost unless a phone can still open it with a fingerprint or face. Keep the key written down somewhere safe.
Found a vulnerability?
Email us with “Security” in the subject. Please keep the details private until it is fixed, and we will keep you posted on the fix.