Frequently asked questions

No. Your task content is encrypted on your device with AES-256 before it is sent anywhere. The server only stores ciphertext plus a little metadata (random IDs, timestamps, sync status). We have no key to decrypt it.

Everything you write: task titles, notes, due dates and times, project, section and label names, and recurring schedules. The server only sees random identifiers, timestamps, sync flags, and which item belongs to which project.

Because the app is end-to-end encrypted, account recovery is not the same as data recovery. If you lose your secret and have no key backup, your data cannot be decrypted by anyone, including us. Lockday helps you record a recovery phrase and save a key backup during onboarding so this does not happen.

No ads, no third-party trackers, no analytics on what you write, and no selling of data. We could not sell your content even if we wanted to, since we cannot read it.

Yes. Lockday is offline-first. You can create, edit, and complete tasks with no connection. Changes sync automatically when you are back online.

You can set flexible rules: daily, weekly, every Nth weekday, or monthly on a specific date. You can skip or reschedule a single occurrence without breaking the rest of the series.

Yes, on both Android and iOS. It shows today's tasks and lets you check them off without opening the app.

Yes. You can invite specific people to a shared project. They get the decryption key for that project only, and can see tasks within it. They cannot see anything outside the shared project.

No. You can use Lockday entirely offline on a single device with no account. An account is only needed to sync your encrypted data across devices.

The Free tier covers full task, section, and label management, offline use, reminders, the widget, and syncing your own projects. Pro lifts limits (such as the number of owned projects and labels) and lets you initiate shared projects. Accepting an invitation to a shared project is free.

Through the app store on iOS and on the Google Play build, or with cryptocurrency on the independent (degoogled) build. Pick whichever distribution you prefer.

From inside the app: Settings → Delete Account. This removes your encrypted data, account record, and notification endpoint from the server.

Android, iOS, desktop (macOS and Linux), and web. Your encrypted list stays in sync across all of them when you use an account.

Every direct desktop and Android build shows a SHA-256 fingerprint on the download page. Compute the hash of the file you downloaded and confirm it matches before installing.

Yes. A degoogled Android build with zero Google libraries is available on Zapstore and as a direct APK download, using UnifiedPush for notifications instead of Firebase.