Privacy Policy

The short version

Konfide is a personal information app — tasks, journals, habits and notes. What you write is encrypted on your own device before it is sent anywhere, and the keys that unlock it never leave your device in a readable form. We host your encrypted data, but we cannot read it.

There is no exception to this. Nothing you write is sent anywhere in a form we or anyone else could read, and Konfide has no feature that does so.

Who is responsible

Konfide is operated from Australia by an individual developer. For any question about this policy or your data, write to privacy@konfide.app.

What we hold, and what we can read

Encrypted, unreadable to us. The content of your tasks, journal entries, notes, habits and tags, and any images you attach. These are encrypted on your device with AES-GCM before upload. Our servers hold ciphertext.

Readable to us, because the app cannot work otherwise. Your account email address, and the structure your content sits in:

• when records were created, changed, completed or deleted
• which list, journal or habit a record belongs to, and its order
• dates and times you set — due dates, reminders, habit schedules
• colours, priorities and similar settings

In other words: we can see that you completed four tasks on Tuesday and wrote a journal entry that evening. We cannot see what any of them said.

Your keys, and what that costs you

Your encryption keys are protected by a recovery key generated on your device, and optionally by a passkey or Face ID. We never receive your recovery key.

If you lose your recovery key and every device you have enrolled, your data cannot be recovered — not by you, and not by us. That is a direct consequence of end-to-end encryption rather than a policy choice. There is no back door and no reset.

Who else is involved

We use a small number of service providers:

• Supabase — hosts the database, file storage and account system. It holds your encrypted content and your email address.
• Sentry — collects crash and error reports so faults can be fixed. These contain technical details of what went wrong and your account identifier, so a report can be tied to an account. They do not contain your content, and we have turned off Sentry's option to attach IP addresses, cookies and request data.
• Session recording — if the web app hits an error, Sentry records what happened in that session so the fault can be diagnosed. All text, form inputs and images are masked, so the recording shows which buttons were pressed and in what order, not what you wrote. Sessions where nothing goes wrong are never recorded.
• Apple and Google — only if you choose to sign in with them, in which case they tell us the identifier and email address for your account. If you use Apple's Hide My Email, we only ever see the relay address.

We do not use advertising networks or analytics trackers, and we do not sell or share your data with anyone for marketing.

What the app asks your device for

• Face ID or Touch ID — to unlock your vault without retyping your recovery key. The biometric check happens on your device; we never receive biometric data.
• Photo library — only for photos you pick yourself, which are encrypted on device before upload.
• Notifications — reminders are scheduled and delivered entirely on your device. Because the text is encrypted, it never passes through a push server.

Keeping and deleting data

Your data is kept until you delete it. Deleted items go to Trash first so you can change your mind, and are removed permanently when you empty it.

To delete your account and everything in it, write to privacy@konfide.app. Deletion is permanent, and because we cannot read your content we cannot restore it afterwards.

Children

Konfide is not directed at children under 13, and we do not knowingly collect their information.

Changes

If this policy changes in a way that affects what we collect or who receives it, the date at the top will change and the change will be described here. During the beta, expect this page to be revised as features land.

Contact

Questions, corrections, or a request to delete your account: privacy@konfide.app.