Privacy

Kalondo is a personal to-do app. This page explains which data it stores, how that data is protected, and, just as important, what that protection can't do.

What is stored

• Your account: your name, your email address (and a new one while it waits for verification), whether and when your email address was verified, your account type (Basic or Plus), your preferences, and your password as a secure hash (bcrypt). The password itself can't be read back by anyone.
• Your to-dos: the title, the notes, the folder (Inbox or Next), whether it's starred, and when it was added, starred, changed and done.
• Signed-in devices: for each sign-in, the IP address and the browser, so the session can be recognized.
• Cookies: only the ones needed to keep you signed in and to protect forms, and one that remembers light or dark mode if you choose it. No tracking, no ads, no analytics.
• Nothing from other websites: everything the app needs comes from its own server. It also tells your browser to refuse anything from other websites (with a so-called Content Security Policy), so this can't happen by accident either. No other website gets to see that you use the app.

What is encrypted

The titles and notes of your to-dos, your name and your email address (also a new one that waits for verification) are stored encrypted (AES-256). In the database they are unreadable text. The connection between your browser and the server is always encrypted too (HTTPS).

Not encrypted is information that says nothing about what your to-dos are about:

• which folder a to-do is in (Inbox or Next), and whether it's starred;
• when a to-do was added, starred, changed and done. You don't see these moments in the app, but they keep your lists in the right order, for example the oldest first;
• your account type and your preferences, like your start page and the notes editor you prefer;
• when your email address was verified, and when the last verification email was sent;
• for each device you're signed in on: its IP address (the internet address it connects from) and the name of its browser. That's how the app recognizes that you're signed in.

Your password isn't stored at all, only a hash of it: a scrambled version from which the password can't be worked out, but which the app can use to check your password when you sign in.

What encryption protects against

• Someone who gets hold of a copy of the database, through a mistake, a bug or a leak, only sees unreadable text.
• Your to-dos, name and email address don't end up in the server's log files.
• The administrator can't simply see your to-dos by looking in the database.

What it doesn't protect against

To show your to-dos to you, the app itself has to be able to read them, so the keys are on the same server. In theory, that means the administrator, or anyone who gains access to the server (for example an attacker), could decrypt the data. The administrator doesn't do this, but you should know it's technically possible. Encryption where only you hold the key (end-to-end) isn't used, because a forgotten password would then mean losing all your to-dos.

Emails from the app (for example to reset your password) are sent through the email service Brevo and arrive in your mailbox like any other email.

Verifying your email address

When you sign up, the app sends a link to your email address. You can use Kalondo once you've opened it. That way, a password reset can always reach you. An account whose email address isn't verified within 7 days is deleted. When you change your email address, the old one stays until you've opened the link sent to the new one, and the old address then gets an email that it has been changed.

Where your data is

Kalondo is run in Europe, with European companies. Your data is on a server of Hetzner, a German company, in their data center in Helsinki, Finland, in the European Union. Emails are sent through Brevo, a French company.