Updated 2026-09-25
Your content is encrypted on your device before it's uploaded. To run the service, our servers still need some information in readable form. This is the complete list.
Account
We can see: your email address, when you sign in, your devices and sessions, your plan and billing records. We can't see: your master password or any of your keys.
Vault
We can see: how many items you have and their rough type, sizes, timestamps, folder and sharing structure, schedules on time-locked items, and your audit log. We can't see: item names, usernames, passwords, notes, file names or file contents.
Schedules are readable because our server enforces them with its own clock.
Notes
We can see: how your folders nest, sizes, when notes change, how many versions exist, and whether a note is shared. We can't see: note titles, file names, text, tags, links or attachments.
Calendar
We can see: when events start and end, repeat rules, reminder times and calendar colours. We can also read calendars you subscribe to by link, including holiday calendars, because our server fetches them for you. We can't see: titles and details of events in your own calendars, including events imported from files.
Event times are readable so that we can send reminders on time and work out repeating events. Reminder emails contain the time, never the title.
Why this list matters
A copy of our database would reveal what's in the "we can see" lists and nothing more. For the design behind this, and where it stops protecting you, read Zero-knowledge and its limits and the security page.