Elorit is a digital productivity application that brings tasks, notes, calendars, and daily planning into one system, with separate workspaces for every part of your life.

How does Elorit organize work and life?

Elorit uses Spaces so each area of life has its own Home, Notes, Tasks, Projects, Lists, and Calendar. A shared Capture inbox catches thoughts first; you tag them to a space when they have a home.

What is Capture, Plan, Execute, Reflect?

It is Elorit's simple workflow: Capture gets ideas out of your head, Plan lays the week and day, Execute focuses on what is due today with reminders and a focus timer, and Reflect helps you notice what happened so tomorrow starts clearer.

Security & Trust

Your notes stay yours.

Last updated October 1, 2026

Elorit holds the plans, tasks and notes that make up your life, so we treat them that way. Everything is encrypted in transit and at rest, and Vault adds encryption on your own device for your most sensitive notes.

Elorit is operated by Navday AB, Sweden. Questions or a security report? Write to [email protected].

At a glance

Infrastructure

Data encrypted in transit with TLS
Data encrypted at rest (AES-256)
Served through Cloudflare’s global network
Database hosted in the EU
Production systems protected with two-factor authentication

Accounts

Sign in with Google
Every request tied to an authenticated account
Row-level security: you can only reach your own data

Vault

Note bodies encrypted in your browser before upload
Your vault password never leaves your device
AES-256-GCM with keys derived on your device

Payments

Payments processed by Stripe
Card details never touch Elorit’s servers

Data and privacy

Export your data at any time
Deleting your account deletes your data
Your data is never sold or used for advertising
Your content is not used to train AI models

Vault: client-side encryption

Encrypted on your device. Opaque on our servers.

Lock any note with a vault password only you know. The note body is encrypted in your browser before it reaches Elorit, so our servers only ever store ciphertext. We never receive your vault password and cannot decrypt your locked notes.

Good to know

Vault encrypts the note body. Titles and other metadata are stored normally, so keep sensitive details out of titles.
If you lose your vault password, locked notes cannot be recovered. Not by you, and not by us.
Vault protects notes while they are locked. On a compromised device, an unlocked session can still be exposed.

How we handle your data

Where it lives. Your data is stored in a managed Postgres database in the EU, encrypted at rest. The app is served through Cloudflare, and all traffic uses TLS.

Who can access it. Row-level security limits every query to your own data, and to spaces you share. Production access is limited to the founder and protected with two-factor authentication. We only look at your content to help you when you ask, or when the law requires it.

Payments. Stripe handles all card details. Elorit only stores your plan and billing status.

Email and calendar connections. When you connect Outlook or Gmail, we only request the access each feature needs. You can disconnect at any time, and we then stop syncing and delete the access tokens.

AI assistant. When you use the AI assistant, the content you share with it is sent to our AI provider to produce a response. It is not used to train AI models. Locked Vault notes are never sent.

Export and deletion. Export your data at any time from Settings. When you delete your account, your data is removed from our systems, and from backups within 30 days.

Subprocessors

The services that process data on Elorit’s behalf.

Provider	Purpose	Data involved	Location
Supabase	Database, authentication, file storage	Account data, notes, tasks, attachments	EU
Cloudflare	Hosting, CDN, DNS, security	Requests and IP addresses	Global
Stripe	Payments and billing	Name, email, billing details	EU / US
Google	Sign-in, Gmail sync (when connected)	Email address, profile, synced mail	As configured when connected
Microsoft	Outlook sync (when connected)	Synced mail and calendar	As configured when connected
AI provider	AI assistant (Pro)	Content you share with the AI assistant	Provider region
Email provider	Transactional email	Email address, message content	Provider region

Resources and contact

Privacy policy — how we collect and use data, with Navday AB named as the data controller
Terms of service
Subprocessor list — the table above, kept up to date
Data processing agreement — available on request for teams and businesses
Report a security issue: [email protected]. We reply within 5 working days and won’t take action against good-faith research.

FAQ

Can Elorit read my notes?

Regular notes are encrypted at rest and only accessed to help you when you ask, or when the law requires it. Notes locked with Vault cannot be read by us at all: we only store ciphertext.

What if I forget my vault password?

Locked notes can’t be recovered. We never have your password, so there is nothing for us to reset. Store it somewhere safe, like a password manager.

Are note titles encrypted?

No. Vault encrypts the note body. Titles and other metadata are stored normally, so keep sensitive details out of titles.

Does the AI assistant see my Vault notes?

No. Locked notes are never sent to the AI provider.

Is Elorit SOC 2 certified?

Not yet. We follow the practices on this page today and will share a formal certification if we pursue one.

Is Elorit GDPR compliant?

Elorit is run by a Swedish company and built to meet GDPR: your data is stored in the EU, and you can export or delete it at any time.