Terms of Service

These terms are the agreement between you and VoidCove for your use of the VoidCove website, apps, and services. By creating an account or using VoidCove, you agree to them. If you do not agree, do not use the service.

VoidCove is built and operated by an individual, not a company. There is no support department behind it — the person who writes the software is the person who answers when something goes wrong.

VoidCove is a workspace for notes, tasks, boards, and a calendar. It runs in a browser, and as a desktop app for Windows.

Accounts that already use VoidCove Vault, the zero-knowledge password manager, and the VoidCove Vault browser extension can continue to do so. Vault is not currently part of what a new account is set up with.

One account covers all of it. Features are added, changed, and removed as development continues.

VoidCove is beta software and is still under active development. Bugs are expected, and while every precaution is taken, there is a real chance of data loss. You are shown this warning the first time you sign in, and it is repeated here because it is the most important practical thing to know about the service.

Do not rely on VoidCove as your only copy of anything important. Keep independent backups of anything you would be upset to lose. Settings includes an export, but it is not a full backup: it downloads your notes as a ZIP of Markdown files, it skips anything in the trash, and it does not include tasks, projects, boards, or calendar feeds. Anything outside your notes needs a copy you make yourself.

Beta also means the service can break, change how it behaves, or lose data without warning, and that features may be removed. Please report problems when you hit them.

You need an account to use VoidCove. You are responsible for what happens through your account and for keeping your account details accurate.

Signing in is zero-knowledge, and so are your note titles and note content. Your master password is never sent to our servers. Your encryption keys are derived from it on your device, and the server only ever receives a hash used to authenticate you. Not everything you store is encrypted, though — Your Content, below, sets out exactly what is and is not.

This has a consequence you should understand before you store anything here: if you lose both your master password and your one-time recovery code, your encrypted data is permanently unrecoverable. There is no reset, no backdoor, and no support process that can restore it. We cannot decrypt your data for you because we do not hold the means to. This is not a policy we can make an exception to — it is a property of how the system is built.

Using the recovery code has a cost of its own, and you should know it before you need it. Recovery sets a new master password and derives a new key from it. Your existing encrypted notes are not re-encrypted under that new key, so they cannot be opened again: the stored text remains on the server, but nothing can decrypt it, and the app will show it as unable to decrypt. On accounts that have a vault, the items you created are sealed with the same key your notes are, and they are lost in the same way. The recovery code gets your account back, not the content encrypted under the master password you replaced.

Safeguarding your master password and your recovery code is your responsibility. The recovery code is shown once, at account creation. Store it somewhere separate from your password, and treat anyone who has either one as having access to your account. There is no way to change a master password in place — recovery is the only way to move an account onto a new one, and it costs you the recovery code, your encrypted notes, and any vault items you own. If you believe someone else has gained access, export what you need first, then run recovery and tell us through the contact form.

Do not use VoidCove to store, send, or distribute anything illegal, and do not use it to harm other people.

Do not attempt to breach, probe, or interfere with the service or the infrastructure it runs on, and do not overload it or work around rate limits, quotas, or access controls. Do not use automated means to register accounts in bulk.

Do not resell, rent, or repackage VoidCove as a service to others.

Security research is welcome. If you find a vulnerability, report it privately instead of exploiting it.

Whatever you put into VoidCove stays yours. We claim no ownership of it, we do not sell it, and we do not use it to train anything.

To run the service we need a limited permission to do the mechanical things storage and sync require: hold your content on our servers, copy it between your devices, back it up, and return it to you in the app. That permission exists only to operate VoidCove for you, and it ends when you delete the content or your account is removed.

Be aware of what is and is not encrypted. Note titles and note content are encrypted on your device before they reach our servers, so we cannot read them. Nothing else is. Stored in plaintext: folder names, tag names, and note metadata — dates, favorite and trash flags, board and list positions, and which folder and tags a note belongs to; task titles, descriptions, labels, checklist items, links, and comments; project names; board column names; and the names and URLs of any calendar feeds you add. The server has to be able to read those, because the calendar and the board and list views sort and filter on them.

The practical version: notes are the only place text is hidden from us. Keep sensitive information out of everything else — a folder name, a tag, a task, a checklist item, or a task comment is not a private place to put something.

The privacy policy covers what is collected and how it is handled.

VoidCove is provided as-is and free of charge during beta. There is no uptime guarantee and no service level commitment. It may be unavailable for maintenance, because something broke, or because a provider it depends on is having a bad day.

Features may change or be withdrawn, and the service as a whole may be discontinued. If VoidCove is going to shut down, we will give reasonable notice and a period in which you can export your data before it is deleted.

VOIDCOVE IS PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, SECURE, OR ERROR-FREE, OR THAT DATA WILL NOT BE LOST.

Some places do not allow these exclusions. Where that is the case, they apply only as far as the law permits, and nothing here removes consumer rights you have that cannot be waived.

As far as the law allows, VoidCove and its operator are not liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, lost data, or the cost of substitute services, arising out of your use of the service.

Because VoidCove is provided free of charge, total liability for any claim relating to it is limited to the greater of what you have paid to use it and one hundred United States dollars.

Nothing in these terms limits liability for gross negligence, willful misconduct, fraud, death or personal injury caused by negligence, or anything else that cannot be limited under applicable law.

This is the trade-off of free beta software: the real protection against data loss is your own backups, not a claim against us.

You can stop using VoidCove at any time. To have your account and its data removed, ask through the contact form and we will delete the account record along with the notes, tasks, and vault items held against it.

We may suspend or close an account that breaches these terms, or where keeping it open puts the service or other users at risk. Where it is practical to do so, we will tell you first and give you a chance to export your data.

Deleted data is not recoverable. Encrypted content stays unreadable to us either way, before and after deletion.

These terms will change as VoidCove changes. When they do, the effective date at the top of this page is updated, and material changes are announced in the app or by email where appropriate. Continuing to use VoidCove after a change means you accept the updated terms. If you do not, stop using the service and ask for your account to be removed.

VoidCove is operated from the United States. These terms are governed by the laws of the United States and of the state in which the operator is based, without regard to conflict-of-law rules, and any dispute will be heard by the courts having jurisdiction there.

If any part of these terms is found unenforceable, the rest stays in force. Nothing here overrides mandatory consumer protections that apply where you live.

Questions about these terms, bug reports, and security disclosures can be sent through the contact form at https://auth.voidcove.com/contact.