How exactly is my data end-to-end encrypted?
Your sensitive content is encrypted directly on your device with AES-256-GCM before it reaches the server, an established, globally recognised standard. The key is derived from your password (PBKDF2 with 600,000 rounds), and your password never leaves your device. Each household also has its own key, stored encrypted separately for every member. Only unreadable ciphertext sits on the server.
Which data is encrypted, and which isn't?
Encrypted is everything from your family life: tasks, appointments (including location), shopping lists, timetables, expenses, care entries, notes, messages, handover notes, uploaded documents (the files themselves too), stored passwords and the children's profiles with blood type, allergies, medication and emergency contacts. Not encrypted is purely administrative data the system needs to work: your email address for login, the names of your household and members, profile pictures and technical details like timestamps.
As the operator, can you read my content?
No. Decryption needs the key from your password, and that never leaves your device. Neither I nor the hosting provider see your encrypted content in the clear, only unreadable ciphertext. All I can see is the administrative data mentioned, not the content.
Where is my data hosted?
Backend, database and all file uploads run on Supabase in a data centre in the EU (AWS region Ireland). Uploaded documents live in private, non-public storage areas of the same EU project. The web app is served via Vercel.
How is GDPR ensured?
A controller with a legal address in Germany (see the legal notice). For sign-up I only need an email address and a display name, nothing more. All processors (incl. Supabase, Vercel, Stripe, Apple, RevenueCat, Resend, Google) are listed transparently in the privacy policy. Your rights are genuinely implemented: full data export as a ZIP and permanent account deletion, both right in the app. And: no analytics or tracking services, no cookies for analytics.
What happens if I forget my password?
Because your password is the key to your content, I can't simply reset it, otherwise the encryption would be worthless. That's why you get a recovery code when you set up. Keep it safe: with it you restore access. Without your password and without the recovery code, nobody, not even I, can decrypt your encrypted content.
