Nothing leaves you unless you say so.

What you mark in your examination is between you, God, and your confessor. Choose exactly where, if anywhere, it is kept.

Settings

How the encryption works

Before anything is uploaded it is encrypted on this device with a key derived from your password. The server stores only sealed ciphertext: never your key, or a single word you marked. We hold no key, so there are no known ways for us to read your conscience, even if we were ordered to. You can delete everything you have stored, at any time.

Your recovery code is generated on this device when you make an account and shown once. Keep it somewhere that isn't this device.

You choose what we know about you. An anonymous account is a username and a password: we hold no address, no name, nothing but sealed text. An email account lets you reset a forgotten password, which gets your account back; opening your data still needs your recovery code, because a reset can't decrypt anything.

Where your reflections live

Three choices: nothing saved, saved on this device only, or end-to-end encrypted in the cloud. Choose in Settings.