End to End Encryption FAQs

What is end to end encryption?

End to end encryption is a secure method of communication where only the sender and intended recipient can read the message. In the case of Goalie, the sender and recipient are both you. It means that on the server your data is encrypted so in the unlikely event of a server compromise, your data is safe as long as you have your private key.

How does Goalie encrypt my data?

When you enable end to end encryption, Goalie will generate a new private key for you locally. You will have to keep this key safe as it is the only way to decrypt your data, if you lose it you will lose access to your data. Your encrypted data is only ever decrypted locally by you with your private key.

What data is encrypted?

Goalie encrypts all the text in your Projects, Timelines, Goals and Notes.

We do not encrypt non text fields (dates, booleans, IDs) e.g. the time a goal is created and updated or ID related fields such as goal ID, next goal ID, etc.

How do I enable end to end encryption?

1. Head to your account page
2. Click on the “Enable E2EE” button
3. Follow the on screen instructions

Can I disable end to end encryption?

No, we don’t currently support disabling E2EE. We will consider adding this in the future.

Should I enable end to end encryption?

This is totally up to you and your risk tolerance. Whilst end to end encryption keeps your data more secure it does introduce the overhead of saving your private key as well as your login details. It also introduces the risk of permanently losing access to your data if you lose your private key. That being said if you value privacy and security these downsides are most likely worth it for the peace of mind it offers.