Encrypted sync · zero-knowledge

Your data follows you.
The key never does.

Portfolio, journal and broker keys live on your device. Turn on cross-device sync and everything is encrypted before it's uploaded — our servers store ciphertext, and we don't hold the key. Not a policy. The architecture.

Open the app The full security model
Encrypted on device — before upload Ciphertext only on our servers Zero-knowledge — we can't read it
sync · zero-knowledge
device.key      local · never uploaded
portfolio.enc   encrypt · client-side
journal.enc    encrypt · client-side
broker.keys     on-device only
server.store    ciphertext ✓
server.canRead  false
How sync works

Encrypted before it leaves,
readable only where you are.

The goal is simple: make it impossible for us to read your synced data by construction, not by promise. Three moves, and the plaintext never touches a server.

→Encrypt on your deviceYour passphrase, your key
→Upload ciphertext onlyWe can't read it
→Decrypt on your devicesDesktop · Web · Android

Key derived on device

Your encryption key is derived on-device from a passphrase you choose. The passphrase is never sent to us.

Encrypted locally

Portfolio, journal and settings are encrypted on your device before anything is uploaded.

Only ciphertext leaves

What reaches our servers is ciphertext plus the metadata needed to sync — nothing we can decrypt.

Decrypted by you

Another device with your passphrase derives the same key and decrypts locally. Plaintext never exists on the server.

Privacy by architecture

What the design guarantees.

Zero-knowledge isn't a marketing word here — it's what the system can and cannot do.

Broker keys stay put

Broker and exchange API keys are treated as device-only. They are not part of sync and do not leave your device in readable form.

We store ciphertext

Because the key is derived from a passphrase we never receive, our servers hold ciphertext and cannot read your content.

Recovery is yours

If you lose your passphrase, we cannot recover your end-to-end encrypted data — that is the trade-off of true E2E. Keep your passphrase safe.

One continuous picture

The same intelligence,
on every device you own.

Start a thesis on the desktop, check risk on the web, get the alert on your phone. Encrypted sync keeps one continuous picture — without handing us your data.

Desktop

Native Windows app — the full workbench, decrypted locally.

Web

Open the app in any modern browser. Your key never leaves the session.

Android

The intelligence platform in your pocket, decrypting on the device.

Sync is always optional — turn it on in the app whenever you want it, and off whenever you don't.

Yours alone

Your research, everywhere.
Readable only by you.

Turn on encrypted sync in the app whenever you want it. It's always optional, and always yours.

Open the app See the security model