Concrete facts, not security slogans.
What runs locally, what is transferred, how planned encrypted sync is intended to work, which metadata remains visible, and how published builds can be verified.
Every claim needs a defined scope.
“Local”, “encrypted”, or “verified” never applies automatically to every Priviot feature and version. This page separates local core features, optional online services, technical metadata, and version-specific build evidence.
The next generation of synchronization
The new synchronization is being prepared for Priviot Paste, Notes, and Tasks. PDF and Write are outside this planned scope. Use requires an approved app version and an available service; this description does not announce general activation.
The new synchronization encrypts content on the device with XChaCha20-Poly1305. Ed25519 signatures verify its origin; X25519 protects key delivery to authorized devices. This describes the new sync architecture, not every local file or the web account area.
Sign-in and content access are separate. A new device needs device approval or recovery. Compare identity and device fingerprints through an independent channel as explained in the app before confirming a connection.
Keep your Recovery Secret offline and separate from the device. Resetting the account password does not replace cryptographic recovery. Without an authorized device, valid recovery information, or an independent backup, encrypted content may remain inaccessible.
Shared organization and team snippets in Paste use a separate encrypted scope. Suite Business, membership, and role do not replace cryptographic authorization. Only the current organization owner may recover a library using its separate recovery backup. This organization path has not been publicly released.
Older sync clients are not automatically compatible with the new synchronization. Existing local content is imported into the new sync only after deliberate selection in the app. Keep an independent backup before changing versions.
Device revocation blocks further authorized access but cannot retrieve copies already decrypted. Sync is not a backup. Disabling sync, signing out, and deleting data are separate actions.
A paid Pro or Suite subscription is required for personal sync. Additional devices need device approval or recovery.