One account
The database seeds one owner account. The app has no registration route, so strangers cannot create accounts through the product.
Today
Reminders appear here and in The Brief when their time window opens. People Dates use each date's own lead times, normally 7 days and 1 day before. This local v1 does not send push, text, or email notifications; that delivery layer belongs with public hosting in v2.
The Security Promise
Personal HQ is designed around one person and one owner. It does not need an audience, an advertising profile, or a public sign-up page.
The database seeds one owner account. The app has no registration route, so strangers cannot create accounts through the product.
Passwords are stored as bcrypt hashes, never as plain text. Your session travels in an httpOnly cookie and expires after seven days.
The interface uses no advertising, analytics, tracking pixels, third-party scripts, or CDN fonts. The app makes no outside requests to render your private pages.
Use “Download my data” at any time to export the complete contents of your account as JSON, including shopping lists and reminder settings.
The local SQLite database file is not itself encrypted in v1. Protect the device or server that holds it, use full-disk encryption where available, and use HTTPS when the app is hosted. No software can honestly promise to be “unhackable.”
The seeded password is temporary and the app keeps a warning visible until you replace it. Choose a long password that you do not reuse anywhere else.
Export everything in this account - calendar, to-dos, accomplishments, people, dates, relationships, notes, settings, and shopping - as one JSON file.
Keep exports somewhere private. They contain the same personal information as the app.