Your data
We cannot read what you write. Neither can anyone who steals the database.
Every diary entry, every note, every listing batch is AES-256 encrypted with a key that only your password can open. We never store the password, the key, or any way to rebuild them - so a hacked database is just ciphertext, to a thief and to us alike.
Your key, not ours
The key is derived from your password at login and forgotten when the request ends. It never touches the database.
A recovery code, shown once
Forget the password and the code you wrote down at signup is the only way back in. We keep no copy - that is the point.
Sealed share links too
A shared day is stored encrypted with a key that lives inside the link itself. The database holds only ciphertext and a hash.
The honest fine print: password and recovery code both lost means the data is gone for good. A reset that could bring it back would mean we could read it - and then none of the above would be true.