Reapps

Private. Encrypted. Yours.

Open-source, end-to-end encrypted productivity apps.
Your data never leaves your device unencrypted.

Try re/task · Try re/notes · Website

Reborn Apps is a suite of two Progressive Web Apps built with a Zero Knowledge architecture — all user data is encrypted on your device before it ever reaches the server. The server stores only ciphertext and cannot read your tasks, notes, or metadata.

Built by Reborn Foundation (Poland), a European non-profit. Hosted on Hetzner Cloud (Germany). No tracking, no ads, no email required.

Apps

re/task — Encrypted task management

• Task lists
• Subtasks with progress tracking
• Recurring tasks — daily, weekly, or custom schedule
• Starred & favorites — focus on what matters
• Due dates & reminders with optional push notifications
• Smart views — Today, Upcoming, Overdue, Starred, Completed
• Full-text search across all lists
• Trash & recovery — restore deleted tasks within 30 days
• Import & export — JSON backup and restore

re/notes — Encrypted notes & documents

• Markdown editor — headings, lists, code blocks, images, and more
• Folders & tags — flexible organization system
• Version history — up to 10 saved versions per note
• Internal links — link between notes with autocomplete to build a knowledge base
• Live preview — edit Markdown on one side, see formatted output on the other
• Encryption X-Ray — see exactly what the server sees (encrypted blobs)
• Full-text search — search by title or content across all notes
• Trash & recovery — safely delete and restore notes
• Import & export — Markdown, JSON, or encrypted backup; import single .md files or entire folders with subfolders (e.g., an Obsidian vault) preserving directory structure

Shared features

• 🔐 End-to-end encryption — data is encrypted on your device before reaching any server
• 📱 Offline-first PWA — works without internet, syncs when back online
• 🔄 Cross-device sync — access from any device, changes sync automatically
• 🛡️ Two-factor authentication — TOTP (2FA) with one-time recovery codes
• 👤 One account, no email — just a username and password, shared across both apps (SSO)
• 🌍 Installable — add to home screen as a native-like app
• 🌙 Dark mode — full dark theme support
• � Multilingual — English 🇬🇧, French 🇫🇷, German 🇩🇪, Polish 🇵🇱, Spanish 🇪🇸

Security & privacy

Reborn Apps uses a Zero Knowledge E2E architecture:

How it works:

1. You set a password → a master encryption key is derived on your device (PBKDF2 600K iterations)
2. All data is encrypted with AES-256-GCM before leaving the browser
3. The server stores only ciphertext — it cannot decrypt anything
4. Even sensitive metadata (due dates, completion status, starred flags) is bundled into an encrypted blob
5. If the server is compromised, attackers get only encrypted noise

⚠️ If you forget your password, your data is irrecoverable. Recovery codes cannot help with password recovery — they only bypass 2FA if you lose access to your authenticator app. This is by design — the server cannot help you because it cannot read your data.

For a deep dive, see the Zero Knowledge Architecture document and the Security Overview.

Try it

A free public instance is available at reapps.eu, maintained by Reborn Foundation:

No email required. Create an account with just a username and password.

Live status: stats.uptimerobot.com/JDB9dZbrRv

Self-hosting

You own your data — you can also run your own instance.

Requirements

• Docker v25+ with Docker Compose
• A .env file (copy from .env.example)

Quick start (Docker Compose)

# Clone the repository
git clone https://github.com/fundacja-reborn/reapps.git
cd reborn-apps

# Copy environment config
cp .env.example .env

# Start both apps with SSO support (recommended)
docker compose -f docker-compose.yml -f docker-compose.proxy.yml --profile with-notes up

After startup:

Both apps share a single PostgreSQL database and a single user account (SSO via shared origin).

First startup takes a few minutes (downloading images + pnpm install). Subsequent starts are fast thanks to Docker volume caching.

Other configurations

# Only re/task (port 4200)
docker compose up

# Both apps on separate ports (no SSO)
docker compose --profile with-notes up

Without Docker

# Prerequisites: Node.js 20+, PNPM 10+, PostgreSQL

pnpm install
pnpm db:generate
pnpm db:migrate

# Start re/task
pnpm nx dev reborn-task

# Start re/notes (separate terminal)
pnpm nx dev reborn-notes

Stopping & cleanup

# Stop containers
docker compose -f docker-compose.yml -f docker-compose.proxy.yml --profile with-notes down

# Full reset (removes database and cached node_modules)
docker compose -f docker-compose.yml -f docker-compose.proxy.yml --profile with-notes down -v

Tech stack

Project structure

apps/
├── reborn-task/         # Task management app (SvelteKit)
└── reborn-notes/        # Notes app (SvelteKit)
packages/
├── @reborn/auth         # Authentication (JWT, 2FA, recovery codes)
├── @reborn/crypto       # E2E encryption & key management
├── @reborn/database     # Prisma schema & client
├── @reborn/storage      # Encrypted IndexedDB stores
├── @reborn/types        # Shared TypeScript types
├── @reborn/ui           # UI components (shadcn-svelte)
├── @reborn/i18n         # Internationalization (PL/EN)
├── @reborn/utils        # Shared utilities
└── @reborn/api-client   # HTTP client for API
docs/
├── architecture/        # Zero Knowledge architecture docs
└── security/            # Security audits

Contributing

We welcome community involvement! Due to the security-sensitive nature of this project (E2E encryption, Zero Knowledge architecture), we maintain all code changes internally.

How you can help:

• Report bugs — open an Issue with clear reproduction steps
• Suggest features & discuss ideas — join GitHub Discussions
• Report security vulnerabilities — see our Security Policy (please report privately)
• Improve translations — suggest corrections or new languages via Issues

Note: We do not accept external pull requests. Every code change undergoes internal security review to protect the integrity of the encryption layer. If you've found a bug and know the fix, please describe it in an Issue — we'll gladly credit you.

License

AGPL-3.0 — Copyright © 2025 Fundacja Reborn (Poland)

You are free to use, modify, and self-host. If you modify the server-side code and offer it as a service, you must open-source your changes under the same license.

Further reading

• Zero Knowledge Architecture — how encryption works under the hood
• Security Overview — security posture, cryptographic primitives, and known limitations
• Security Policy — how to report vulnerabilities

Support

Reborn Apps is built by a non-profit foundation — no investors, no ads, no tracking. If you find our apps useful and want to support their continued development, every donation helps us build software free from commercial pressure.

→ Donate via Wise

→ More ways to support

Built with privacy in mind by Reborn Foundation (Poland).