Private by design

Your day,
in rhythm.

Tasks, routines, goals, and reflection in one quiet app — end-to-end encrypted on your device. No email, no tracking, no account that isn't yours.

Download How it works
XChaCha20-Poly1305 Argon2id Anonymous account ID
End-to-end encrypted
Every task, goal, and reflection answer is encrypted on your device before it ever leaves.
Zero-knowledge sync
Our database stores ciphertext under an anonymous ID. We never see your titles, notes, or answers.
Offline-first
A local SQLite vault is the source of truth. Sync is optional and can be turned off entirely.
Audited primitives
No hand-rolled cryptography. Argon2id and XChaCha20-Poly1305 via established libraries only.
Four areas, one rhythm

Today. Plan. Journal. Reflection.
That's the whole app.

Hireth is small on purpose. Four places where things belong — and nothing more. Routines live inside Today. Goals decompose into next steps inside Plan. Short prompted reviews live inside Journal. Patterns and values get noticed inside Reflection.

01 · Today

What matters today?

A single quiet view for the day ahead. Due tasks, today's routines, one short check-in. No infinite project trees. No notification anxiety.

Three sections. Now·Due, Today, Routines — and a quick check-in card. Nothing else.
ABCDE priorities as small chips, not loud banners. Status colors win over category colors.
Swipe right to complete, swipe left to snooze. Long-press for edit / snooze / delete.
02 · Plan

Long arcs, broken into next steps.

A goal lives on one card with three visible steps. Tap any step to mark it done. No 200 nested sub-tasks. No streak-shaming if you pause.

Dream vs. Goal. The app distinguishes "what you want" from "what's actually under your control."
One to three active steps per goal at a time — the rest stay hidden until the active ones close.
Weekly audit on Sunday: keep, adjust, or drop. Nothing accumulates silently.
03 · Journal

Short reviews. Steady patterns.

Three questions in the morning. Three in the evening. Four on Sunday. Four at the start of every month. A quiet logbook — not a therapy app.

Daily check-in (2 min). "What truly matters today?" · "Which routine do I want to lock in?"
Weekly review (10 min). Three things that worked, what was unrealistic, what comes off the list.
Monthly planning (15 min). Which goals stay, which routines actually help, and which 1–3 focus areas come next.
04 · Reflection

Patterns and values, written down.

A second, slower notebook for the long game. Notice the loops you keep running. Name the principles you actually want to live by. Nothing to fill out daily.

Patterns. Trigger → old reaction → the small new reaction you want next time. Optional autopilot to replace it with.
Values. A short list of personal principles. Not aspirations — what you'd want a friend to remind you of when you drift.
Stays quiet. No streaks, no nudges, no prompts. You open it when you have a thing worth writing down.
Trust model

What we see vs. what you see.

Your data is encrypted on your device with a key derived from a vault passphrase that never leaves your phone. The server stores ciphertext under an anonymous 16-character ID. Even with full access to our infrastructure, an attacker reads exactly nothing.

Key derivationArgon2id · 64MB · t=3 · p=4
Authenticated encryptionXChaCha20-Poly1305
Account identity16-char anonymous ID
RecoveryBIP39 · 24 words
database / items
Everywhere you work

Four platforms. One vault. One set of keys.

Built on Flutter from a single codebase. Native binaries everywhere — your encrypted data syncs between them, or doesn't, if you'd rather it didn't.

iOS
iPhone · iPad · 17+
Android
Phone · Tablet · 11+
Linux
Direct binary · x86_64
Windows
Direct download · 10+
Questions

Answers we'd want, asked plainly.

What if I forget my vault passphrase?
Your vault passphrase derives the encryption key — we don't have a copy. If you saved your 24-word BIP39 recovery phrase, you can restore on any device. If you haven't, your data is unrecoverable. This is a feature, not a bug: it's what makes "zero-knowledge" honest.
Why two passwords — login and vault?
Your login password authenticates you to the sync server. Your vault password decrypts your data — and never leaves your device. A breach of the login layer gets an attacker a wrapped_master_key they can't unwrap. It's the part that makes the trust model real.
Why no email login?
Email creates a permanent identity link between you and your encrypted data. Instead, Hireth generates a 16-character anonymous account ID at first launch — alphanumeric, URL-safe, collision-resistant. Write it down, save it in your password manager, share it across your devices. That's the whole account system.
Is Hireth open source?
The encryption protocol and sync layer are documented and on a path to source-available. The parts that touch your keys are the first ones being made auditable — anything else would make "audited primitives" a slogan rather than a property.
What does the server actually see?
It sees: your anonymous ID, an encrypted blob, a 24-byte nonce, a key version, an updated_at timestamp, and a small item_type_hint integer for pagination. It does not see: titles, notes, reflection answers, goal text, pattern text, reminder content, categories, or priorities.
How is this different from Todoist or Notion?
Those products are excellent — and they read everything you write. Hireth is narrower on purpose: tasks, routines, goals, reflection, patterns. In exchange you get a server that genuinely cannot read your data, and an account that isn't tied to your identity.
What happens during a data breach?
An attacker with full server access gets a pile of XChaCha20-Poly1305 ciphertext under anonymous IDs. No emails, no plaintext titles, no identity graph. We'd still tell you about it. You'd lose nothing readable.
Available now

Your tasks belong to you.
Not to us. Not to our servers.

Install Hireth on any device. No email, no card, no onboarding survey. You'll get a 16-character account ID and a 24-word recovery phrase. That's the entire sign-up.

Download for iOS Android Linux Windows