Your message text, your private note titles and bodies, the text on canvas cards and their connections, the images you share, and the names you give rooms, discussions, and note tags are all end-to-end encrypted. The scrambling happens in your browser with a key that lives only in the room's invite link and on your own device. The server only ever stores scrambled text it cannot read.

A few things stay readable so the app can route messages and notifications: participant display names, timestamps, who is in a room and when they are active, and how many messages a discussion holds. The room and discussion names themselves are now scrambled like your content. The shape of your activity is still visible, so treat that as the honest floor.

If you connect a hosted model (Claude, OpenAI, Perplexity, Kimi), your Reader questions and your API key pass through this server on their way to that provider. Nothing is stored and nothing is logged, but the server is in the path, so the Reader is not end-to-end encrypted the way your messages and notes are. A local model on your own machine (Ollama, LM Studio) is called straight from your browser and never touches the server at all.

The invite link carries the key after the # sign, so anyone who holds the full link can read the room. Share it privately. A leaked link cannot be un-leaked, so if a link gets out, the safe move is to open a fresh room.

Removing a person cuts off their access to the server right away. Because they already hold the room key in their browser, the clean reset is to rotate the key: in room settings, Rotate turns the current room into a read-only archive and opens a fresh room with a brand-new key. You share the new link privately with the people you keep. Anyone removed earlier, or anyone holding only the old link, cannot read anything that happens after the rotation.

Your Reader and your notes are private from the other people in the room. Nobody else in the room sees what you ask or what it answers. Your AI never reads or posts in the shared chat. Humans talk to each other; the AI only ever augments your own side.

This is a web app, so you are trusting the code the site serves you each time you load it. Epinoia is solo-built and has not had an outside security review yet. That is worth knowing before you put anything truly sensitive in a room.

If a link leaks or a room feels off, open a new room and stop using the old one. Then let the person who runs the app know what you saw.