Security
What we do to keep your projects, notes and payments safe, described plainly.
How your data is protected
Encrypted connection
Everything between your device and TiparApp travels over HTTPS.
Passwords are never readable
Passwords are stored only as one-way hashes, so nobody, including us, can read them.
Protected sign-in
Repeated sign-in, sign-up and password-reset attempts are slowed down automatically. Password resets use a one-time 6-digit code that expires after 15 minutes, and new accounts confirm their email.
Your connected services
Keys and tokens for Anthropic, Google Calendar and Notion are stored encrypted and never shown again after you save them. You can disconnect them at any time.
Card payments
Payments are handled by NETOPIA Payments with 3-D Secure. You enter your card on their page, so card details never reach our servers.
Careful with uploads
Only common document, image, audio, video and archive files can be uploaded, and the upload folder refuses to run scripts or web pages.
Private by default
What you create is visible only to you. A shared sketch link is a long random address, isn't listed by search engines, and stops working as soon as you stop sharing.
A hardened app
Strict browser security headers, including a Content Security Policy, limit what can run on our pages, and unexpected errors are monitored so they get fixed quickly.
You stay in control
Take your data with you
Download everything (tasks, calendar, documents, files and sketches) as one file from Settings, whenever you like.
Delete your account
Delete your account from Settings and your data and files are removed. If Premium is still active, deletion happens when it ends, and you can cancel until then.
No data selling, no ads
We don't sell your data or show ads. AI features run with your own Anthropic key.
Found a security issue?
Please tell us privately so we can fix it quickly: contact us