Private by default
You see your own work and anonymous team totals. The manager sees everything. Enforced on the server, not hidden in the interface.
Security and your data
Your work is yours, and you can take it with you
No lock-in through your own data, no shared database with strangers in it, and no clever interpretation of who gets to see what.
Your own workspace
One company per workspace, isolated from every other. No shared table anyone can wander into.
Real accounts
Passwords hashed with scrypt, sessions in HttpOnly cookies, and on iOS the session lives in the Keychain.
Every write is recorded
An audit log of who changed what and when, per workspace — including the things a manager does.
Exit whenever
A full JSON backup and a CSV of every task, on demand. Your data is not the lock-in.
Backed up before anything drastic
A snapshot is written automatically before any destructive operation — including the ones you ask for by mistake.
On the phone
The app is not just the website in a wrapper
Face ID
Optional, off by default. On, and the app asks when you open it and when you come back to it.
Keychain
The session is stored in the iOS Keychain — encrypted at rest and excluded from device backups — not in webview storage.
Offline
Work done with no signal is kept on the device and sent when the connection returns. Nothing is lost in a tunnel.
Notifications
Only mentions and decisions that need you. No engagement nudges.
Questions
Does everyone see everyone else’s work?+–
No. Each person sees their own tasks, their own hours and anonymous team totals. Managers see everything, and a team lead sees their own team. It’s enforced on the server — other people’s data never reaches your browser, so there is no “hidden” view to find.
Where does the data live?+–
In your workspace, on whichever host you or we run it on. Every workspace is isolated from every other; there is no shared table that one company can read another out of.
Can I get my data out?+–
Any time, without asking us: a CSV of every task (per person or the whole workspace), a CSV of the time report for any range, and a full JSON backup of everything including comments, logs and history.
Can we host it ourselves?+–
Yes. It’s a Node server and a SQLite file — one process and a disk. It also runs serverless against a hosted database if you’d rather not keep a machine running.
What happens if someone deletes something by mistake?+–
Deleting a task offers an undo immediately. Anything workspace-wide and destructive writes a database snapshot first, automatically, before it runs — including the operations you asked for.
What’s recorded about us?+–
Every write: who changed what, when, and on which task. That’s the audit log, and it’s per workspace — including the things a manager does.
What about passwords?+–
Hashed with scrypt, never stored or emailed in the clear. Sessions are HttpOnly cookies, so JavaScript can’t read them; on iOS the session lives in the Keychain, behind Face ID if you turn it on.
How big can a team be?+–
It’s designed around 5 to 40 people. A workspace holds up to 20,000 tasks, which is years of work at that size.