Your server can't read your tasks.
Devices encrypt tasks, history, and images before upload. Only they hold the keys, so even the machine running the server cannot read your tasks.
Sync
End-to-end encrypted sync through a server you run. Free, open source, and invisible once it's set up.
No server to run? Aven Cloud free preview
Devices encrypt tasks, history, and images before upload. Only they hold the keys, so even the machine running the server cannot read your tasks.
Every change lands in your local database first. Nothing waits on the network, and the sync daemon catches up when the server is reachable.
Your terminals and your coding agents work from the same tasks. Aven for iPhone and Android joins the same sync.
When two devices edit the same field between syncs, Aven keeps both values and asks you to choose.
How it works
aven server setup prints a setup invitation, then aven server serves it.aven sync setup with the invitation. Its tasks become the starting data.aven sync invite prints an invitation and a QR code, valid ten minutes.aven sync join on the new device. Tasks download, then images.Where it runs
Tailscale or WireGuard. Devices connect to the server's VPN address and nothing is exposed to the internet.
Put it behind the reverse proxy you already run and give devices its HTTPS URL.
The same server in a container, with a volume for storage and an invitation-only setup.
aven sync setup.Sync is not a backup. Keep your own backups too.