How Kelunor protects your data
In short: what you write in Kelunor is locked on your phone before it is sent anywhere. Only you — and the people in your group — have the key. We carry the locked box, but we can't open it. Neither can Google, whose servers host the app.
🔐 What “end-to-end encrypted” means
Think of a box with a padlock. Your phone puts your note in the box and locks it. The box travels to the server and is stored there locked. Only a phone that has the key can open it — yours, or a group member's.
We never receive the key. So even if someone broke into the servers, they would find only scrambled text.
📋 What is encrypted
Titles and descriptions of events, tasks, notes, shopping lists and checklists (every item), photos and their captions, places, links, categories, group chat and comments.
What stays readable, so reminders can reach you: the date and time, whether something repeats, whether a task is done, who it is assigned to, and who is in a group. The server knows that you have something on Tuesday at 10 — not what it is.
You choose: everything (recommended), only some kinds, or nothing — in Settings → Security for “Only me”, and on the group's page for a group (its admin chooses).
🔑 Your key
The key is created on your phone the first time you open Kelunor. It never leaves your phone unprotected.
So you can get it back on a new phone, you choose one of two: a recovery code of 24 words that you write down on paper (recommended), or a password of your own. Unlocking with your fingerprint or face also works.
Important: if you lose all your devices and the code (or forget the password), nobody can recover your encrypted data — not even us. That is the price of real privacy. Keep the code somewhere safe, not in a photo or a message.
👨👩👧 Groups
Each group has its own key, shared only with its members. A new member receives it automatically from someone who already has it.
When someone leaves the group, a new key is made automatically: they can't read what is added after they left.
Group and private chats are encrypted from the start, even before you protect your key: if you lose your phone, the other members hand the key back to your new device automatically.
If someone's security key changes (a new phone, new keys), the chat tells you — like WhatsApp. If you're not sure why, ask them directly.
🏢 Who hosts the app
Kelunor runs on Google Cloud (Firebase), with data stored in the European Union (Belgium). Google stores and delivers the data, but for encrypted content it sees only scrambled text.
Notifications on your phone never contain the content of your items.
🛡️ Other protections
Sign-in with fingerprint or face (passkeys) and two-step verification with an authenticator app.
The server accepts requests only from the genuine Kelunor app, and only members of a group can reach its data.
Photos are cleaned of hidden information (like the GPS location) before they are uploaded.
✅ What you can do
Protect your key: write down the 24-word code (Settings → Security). Turn on fingerprint unlock. On a shared or borrowed device, lock encryption when you are done.