End-to-End Encryption Explained: How We Keep Your Notes Safe

What is End-to-End Encryption?

End-to-end encryption (E2EE) is a method of secure communication where only the communicating users can read the messages. In the context of a notes application, it means only you can read your notes – not even we, the service provider, can access them.

How Does It Work?

The Basic Concept

Encryption: Your note is encrypted on your device using a key that only you possess
Transmission: The encrypted data travels to the server
Storage: The server stores only the encrypted version
Decryption: When you retrieve your note, it's decrypted on your device

The Keys to Security

End-to-end encryption relies on cryptographic keys:

Your Private Key: Known only to you, never leaves your device
Your Public Key: Can be shared, used by others to encrypt messages for you
Encryption Key: Derived from your password or biometrics

Why This Matters

Zero-Knowledge Architecture

With E2EE, we operate on a "zero-knowledge" basis. This means:

We cannot read your notes
We cannot hand over your data to third parties (because we don't have it)
Even if our servers were breached, your notes remain secure

Protection Against Various Threats

Threat	Protected?
Server breach	✅ Yes
Man-in-the-middle attacks	✅ Yes
Government requests	✅ Yes
Rogue employees	✅ Yes

How SVGN Implements E2EE

Our Encryption Stack

We use industry-standard encryption algorithms:

AES-256-GCM for symmetric encryption
PBKDF2 or Argon2 for key derivation
X25519 for key exchange when sharing

Local-First Approach

Your notes are encrypted before they ever leave your device. The encryption happens entirely client-side, meaning:

You create a note
It's encrypted with your key on your device
Only the encrypted blob is sent to our servers
When you sync, encrypted data is downloaded and decrypted locally

The Trade-offs

What We Gain

Uncompromising privacy
Protection even if our systems are compromised
Peace of mind for sensitive information

What We Sacrifice

We cannot recover your data if you lose your password
Server-side search is impossible (we can't see your content)
Some features require more complex implementations

Best Practices for Users

Protect Your Password

Your encryption key is derived from your password. A weak password means weak encryption. Use a strong, unique password and consider a password manager.

Backup Your Recovery Key

We provide a recovery key during setup. Store this somewhere safe – it's your only way to recover access if you forget your password.

Keep Your Devices Secure

E2EE protects data in transit and at rest on our servers. But if your device is compromised, an attacker could access your decrypted notes.

Conclusion

End-to-end encryption is the foundation of our commitment to your privacy. It ensures that your notes truly belong to you – private, secure, and inaccessible to anyone else.

At SVGN, we believe privacy is a right, not a privilege. E2EE is how we make that belief a reality.