[zaphod4prez]

This is awesome! It seems like you've paid close attention to security and privacy, but I would love a clearer, stronger guarantee. "We truly cannot access your data, will never access your data, and will never, ever sell your data." That would go far here.

[scubakid]

Thanks! And just in case you haven't seen them, let me know if these FAQ topics help a little:

https://projectionlab.com?help=enter-data

https://projectionlab.com?help=data-security

https://projectionlab.com?help=am-i-the-product

But more directly to your point, if you enable cloud sync, that uses Google Firebase. Firebase encrypts at rest and in transit and has the usual certifications, but the project owner does have an admin UI for Firestore. If that's a concern, there are always the other data persistence options as alternatives: localStorage only, and/or importing/exporting copies of your data to local JSON files.

Perhaps it would also be wise for me to look into integrating with something like GCP cloud kms, that way maybe the user could supply their own encryption key client-side?