Private
Every row and file is encrypted before it leaves the device. Key handling is idiomatic on every platform.
Skip to content
How it works
The life of a store
Local first
The phone inserts a row. It commits on-device; nothing waits on a network.
rust
handle.write(|sql| {
sql.execute("INSERT …", params)?;
Ok::<_, CovenError>(())
}).await?;Configure cloud
Serverless sync
The cloud becomes the sync medium. Devices publish encrypted, signed slots in one shared order and read each other's; it only ever holds ciphertext.
rust
handle.start_sync().await?;Go offline
Everyone writes
Apart, both devices edit the same row. The next sync applies both: merge is cell by cell.
sql
UPDATE notes SET body = 'oat, 2%' …Attach a photo
Files, too
A photo commits in the row's transaction. The laptop takes the row now and streams the photo on first view.
rust
handle.write(move |sql| {
let file = sql.put_user_file("photos", photo, Place::Cloud)?;
sql.execute("INSERT INTO photos (id, file) VALUES (?1, ?2)", (id, file))?;
Ok::<_, CovenError>(())
}).await?;Keep it offline
Beyond the disk
Each device caches what it reads, within a budget, and fetches only the chunks a read needs. A pin keeps a file whole for offline.
rust
handle.pin(&[recording]).await?;Make a circle
Pick who sees
Rows can belong to a circle. Moving a note into Gifts takes it off every device outside the circle; the rest of the store still syncs to everyone.
sql
UPDATE notes SET audience = :gifts …