Security

Your data

• Everything you save stays on your phone unless you switch on a server feature in You › Data and privacy.
• Saves travel encrypted (TLS 1.2 or newer, HSTS), and files and backups are encrypted at rest.
• Our servers and database are in the EU. The privacy policy lists every provider and country.
• Your archive is never used to train a model. On Core nothing you save is sent to an AI provider.

Your account

• Passwords are stored only as salted Argon2 hashes. You can sign in with Apple, Google, a passkey or a password, and add an authenticator app for a second step.
• Sign-in, codes and sensitive actions are rate limited, and every route that handles your data checks that it is yours.
• Close the account and everything is erased within thirty days.

How we run the service

• Two copies of the service behind a proxy, rolling updates, containers with no extra privileges, and a database that is not reachable from the internet.
• Encrypted nightly backups plus continuous archiving, and a restore drill every month, so a backup is known to work.
• Our own console is hidden from the internet: it opens only from trusted addresses with a passkey or a code, and from anywhere else only with two proofs. Every action in it is logged.
• Dependencies are audited with every change, and requests to addresses supplied by users cannot reach private networks.

Found something?

Please tell us first: [email protected] (see security.txt). We read every report, answer within a few days and will not take action against anyone who acts in good faith and gives us time to fix it. We are a small project and cannot pay bounties, but we will thank you publicly if you want that.