End-to-end encrypted sync
Your synced data is encrypted on the device before it leaves — even the server cannot read it.
The sync server used to store your loop titles and dates as plain text (over HTTPS, with no email or name attached, but readable to anyone with server access). v1.3 makes that data unreadable to anyone but your own devices.
Each phone derives an encryption key from your private sync secret and encrypts every event before sending. The server holds opaque encrypted blobs with no way to decode them. Two devices that hold the same sync secret — i.e. yours, linked via QR or restore-from-key — decrypt each other’s events transparently.
Doesn’t change anything you do day-to-day. The privacy story is just sharper: no email, no password, AND no way for the server to read your data even if it wanted to.
If you’d like to encrypt your existing cloud history (everything from before v1.3 is still on the server in plain form): Settings → Sync → Force resend everything. One tap on any linked device re-pushes the lot under the new encrypted format.