Privacy & Data 🔐

What we store

Your username, tasks and birthdays are stored encrypted.

What is end-to-end encryption (E2EE) and how does it work?

End-to-end encryption (E2EE) means that only you can read your tasks and birthdays. Your content is encrypted in your browser before it is sent to the server, using a password only you know. The server never sees your unencrypted data or your password. Even if someone accessed the database or backups, they would only see encrypted text. If you forget your password, your encrypted data cannot be recovered.

Cookies and sessions

APS uses session cookies to keep you logged in. These cookies are only used for authentication and basic security. They are not used for cross-site tracking or advertising.

Third parties

The app does not use any third-party services aside from Cloudflare for hosting and security.

How long is data kept?

Your account data is kept as long as your account exists. If you delete your account using the built-in delete function, your user record, tasks, and birthdays are removed from the database. Some anonymized technical logs may remain for a limited time for security and debugging.

Account deletion

When you delete your account, the app removes your user account and associated encrypted content from the database. This process is not reversible. If database backups exist, those will expire or be rotated according to the hosting environment’s policies, but they still contain only encrypted content.

Your responsibilities

• Choosing a strong, unique password.
• Keeping your login credentials secret.
• Understanding that if you lose your password and recovery key, your encrypted data cannot be recovered.

Contact

Questions? See Contact page to get in touch.