This Platform Believes in You

Consisto is a space to think, plan, and write — freely, privately, and without judgment. Your thoughts belong to you. We are not here to read them, sell them, or hand them to anyone without cause. You can write anything here: your fears, your plans, your ideas, your contradictions. The encryption is real and the intention behind it is genuine.

We built this on zero-knowledge encryption. Your tasks and journal are encrypted in your browser before they reach our servers. Only your master password — which never leaves your device — can decrypt them. We cannot read your data. No employee can. No one who gains access to our database can.

The level of control you give up here is far lower than you give up to most apps on your phone. We do not analyse your behaviour. We do not build a profile. We do not serve ads. You are a person, not a product.

The One Condition

Freedom on this platform comes with one condition: you cannot use it to organise real harm to real people. That means:

• No planning of terrorism, targeted violence, or mass harm
• No coordination of child exploitation or trafficking
• No drug or weapons distribution networks
• No organised fraud or cybercrime targeting others

This is not about controlling your thoughts. It is about not hosting the operational planning of crimes that destroy lives. Write whatever you need to write. Just do not use this to hurt people.

How Oversight Works

We operate a lawful-access system — the lightest possible version of it. When you set a Secondary Password, a second encrypted copy of your data is stored on our servers. This copy requires two separate keys to decrypt: one stored in our system, one that exists only in the memory of a designated administrator, never written anywhere. Neither key alone opens anything.

We will only use this capability under a valid court order, credible intelligence of imminent harm to life, or a lawful law-enforcement request. Every access is logged with a timestamp. You will be notified afterward unless prohibited by law.

That is the full extent of oversight. No mass surveillance. No arbitrary access. No data sharing with advertisers or third parties. Ever.

Welfare Scan — What It Is and What It Is Not

Periodically, the platform runs an automated welfare scan. This works as follows: an administrator triggers a batch process that fetches the secondary-encrypted copies of up to 15 users' content at a time. The data is decrypted entirely inside the administrator's browser — the plaintext never reaches the server and no human reads it. An automated script checks the decrypted text against a short list of phrases associated with serious distress or risk of self-harm (for example: "want to die", "end my life", "kill myself").

If a match is found, your account is flagged and the next time you sign in, you will see a screen with mental health support resources and helpline numbers. The flag is cleared once you acknowledge the screen. No human reads your content during this process. No record is kept of which specific phrase matched. The scan result is binary: flagged or not flagged.

This is not surveillance. It is a welfare check — the same kind that platforms like Instagram and iMessage use. We disclose it here because you deserve to know, and because the zero-knowledge promise means you should understand exactly what is and is not visible to the system.

Secondary Password — Mandatory

After you accept this policy and sign in, you must set a Secondary Password within your first session. This is required for the lawful-access system to function. The Secondary Password is encrypted under our admin key — we can read it under the conditions above, and use it to verify your identity in a support request.

You will be given three opportunities to set it. If you skip all three, your account and all its data will be permanently deleted without recovery. This is not a threat — it is the policy. An account without a Secondary Password cannot participate in the oversight system and cannot remain on the platform.

Set the Secondary Password once and you will not be asked again. It is separate from your master password and does not affect your ability to access your data.

What We Store

• Your Firebase UID and email — for authentication only
• Encrypted ciphertext of your tasks and journal — we cannot read this
• A secondary encrypted copy — readable only under lawful access conditions and for welfare scanning (JS-only, no human reader)
• Session metadata (type, duration, date) — never the content
• A bcrypt hash of your Secondary Password — not the password itself
• A welfare flag (true/false) — set if automated scan detects distress phrases; cleared once you acknowledge the support screen

Your Rights

You can delete your account and all data at any time from the Account screen. Deletion is permanent and immediate. We keep no backups of individual user data. You can also export or wipe and restart your vault at any time.

Contact

Privacy enquiries: privacy@consisto.in

Last updated: March 2026 · Consisto Beta · Jammu & Kashmir, India
This policy is plain language. It is not a legal document designed to obscure. What it says is what we do.

We noticed some things in your writing that made us want to check in with you.

This platform is built for focus and clarity — but we also know that the hardest thinking happens during the hardest times. If you are going through something painful right now, you do not have to go through it alone.

Below are real people you can reach, right now, at no cost.