Security

Group content is encrypted so that only people in your group can open it by default.

Keys stay with group members. MetElkaarOnline as a service does not hold a readable copy of your notes, lists, or plans in the normal setup.

That is the default promise: people outside your group — and our team — cannot read your original group content.

There are two different recovery codes:

• a recovery code for two-factor authentication (signing in);
• a recovery code for encrypted group content.

Keep both in a safe place. If every member loses access and the group recovery code, and nobody is still signed in, encrypted content can be permanently lost.

We cannot invent a new key for you when Development Feedback is off.

When you sign in on a new phone or computer, you unlock group content with your existing access — for example another signed-in device or the group recovery code.

You can review and revoke signed-in devices in settings. Revoking a device stops it from opening your group until someone unlocks it again.

Encryption protects content on our servers. It does not apply everywhere content can appear:

• on an unlocked device while you use the app;
• in some notifications;
• in a downloaded export from group settings.

An export file is not encrypted. Treat exports like any other private file.

Development Feedback is optional. It only turns on when all group members consent separately.

When it is on:

• we keep a secure recovery option for the group;
• content may be analysed automatically to improve the product;
• we may help restore access if you lose keys.

Employees do not read original notes or private text. They work with anonymised or aggregated results.

If any member withdraws consent, Development Feedback turns off for the whole group, the recovery option is removed, and new analysis stops.

This exception is explained again in the privacy policy. The homepage privacy summary points here so the default encryption story and this opt-in stay consistent.