[scubakid]

Thanks! And just in case you haven't seen them, let me know if these FAQ topics help a little:

https://projectionlab.com?help=enter-data

https://projectionlab.com?help=data-security

https://projectionlab.com?help=am-i-the-product

But more directly to your point, if you enable cloud sync, that uses Google Firebase. Firebase encrypts at rest and in transit and has the usual certifications, but the project owner does have an admin UI for Firestore. If that's a concern, there are always the other data persistence options as alternatives: localStorage only, and/or importing/exporting copies of your data to local JSON files.

Perhaps it would also be wise for me to look into integrating with something like GCP cloud kms, that way maybe the user could supply their own encryption key client-side?