A simple list app is finally public, you can install if you need it.

0 views
Skip to first unread message

NotePo

unread,
Jul 27, 2026, 4:22:12 AMJul 27
to Flappy Neon
Screenshot 4.png

ListPo is a minimal, clutter-free to-do list and note-taking app.

The sole motivation to design another list & note app was to build no clutter list & note app. Further it was also designed to be offline first so you can choose to keep your data for yourself only or with zero knowledge encryption that makes sure only you can read your data, even if its uploaded to cloud, giving more power to you on control of your own data.

Overall experience of ListPo was to be lean and agile with list & notes, easy to write down your ideas, todos or lists quickly.

Whether you are setting a quick reminder, need to go buy groceries, quickly write an abrupt idea, its all easy with ListPo. Pinning frequently used todo, capturing a late-night idea, create reminders, choose themes, the app is welcoming and always ready. Organize your list & notes and lists into custom Spaces, giving every idea its own home.


How your data stays 100% Private?
Our Zero-Knowledge architecture ensures your list & notes are readable only by you. Our servers never see your keys, so your data stays entirely safe.
1. Local Passkey Generation
* What happens: The app creates a local passkey using a standard BIP39 mnemonic phrase.
* Storage: It lives strictly on your device’s hardware keychain via expo-secure-store. It is never uploaded to Firebase or any backend server.

2. Key Derivation (SHA-256)
* Before encrypting, the app hashes your local passkey using the SHA-256 algorithm.
* This derives the secure 32-byte key needed for the encryption process.

3. Encryption (ChaCha20-Poly1305)
The app secures your list & notes using the fast, highly secure ChaCha20-Poly1305 cipher:
* Nonce: For every encryption, the app generates a random, unique 12-byte nonce.
* Ciphertext: Your list & note is encrypted using the 32-byte key and the 12-byte nonce.
* Syncing: The scrambled text (hex format) and the nonce are sent to Firebase. The key stays behind on your device.

The Bottom Line: Because the server never touches your passkey or encryption key, a cloud data breach would yield absolutely zero readable information.


Built to Work Entirely Offline (Local-First)
ListPo is built from the ground up using a Local-First Architecture. This means the app works 100% normally without any internet connection—no loading spinners, no lag, and no broken features. ListPo treats the cloud purely as a backup and a way to sync across devices. Your phone's local database is always the true "source of truth," making the app fully functional even in airplane mode.

Instead of waiting on a cloud database, ListPo saves everything directly to your device using a local app database.
Reply all
Reply to author
Forward
0 new messages