Private Vault: your context, your unlock key

Choose the privacy mode that fits#

Context Library opens in Private Vault mode. It encrypts your title, filenames and source text inside the browser using AES-256-GCM before upload. A key is derived locally from your passphrase using PBKDF2-SHA256 with a unique salt and 600,000 iterations. The passphrase and derived key are not sent to Todoki, Walrus or an AI provider.

Cloud context is a separate, explicitly labelled mode with server-held encryption keys and consented OpenRouter processing. Existing cloud imports are not automatically converted or removed from databases/backups. Meetings are still recorded and transcribed through Todoki and Recall.ai. Optional meeting outcome snapshots use the existing managed Walrus flow, which processes readable summary text. Private Vault does not make those other flows end-to-end encrypted.

1. Add context and keep your passphrase#

1. Open Context Library and stay on Private Vault · encrypted storage.
2. Give the context a title. Describe what you want help with, confirmed facts, and boundaries such as never promising unannounced dates. Or choose text-based PDFs, DOCX or supported text files/folders. Document text is extracted locally before encryption. Import up to 40 files and 48 KB of extracted UTF-8 context, including title and filenames. Hidden and credential files are excluded.
3. Choose a unique 20–256-character vault passphrase. Save it in a password manager and confirm it. Never use a wallet recovery phrase.
4. Read the storage notice, then choose Encrypt & review storage quote. Source text is encrypted locally before any upload. Download the encrypted backup and keep it separately from your passphrase.

2. Review the one-time storage quote#

The fee is $0.25 per started 20,000 encrypted bytes with a $0.50 minimum, separate from meeting capture or subscriptions. The current payment rail uses Base Sepolia tokens with no monetary value. Review the network, receiver and amount yourself. A vault payment never starts a bot.

Todoki temporarily queues browser ciphertext in its database. The managed Walrus relayer embeds and wraps ciphertext in its own storage encryption; it cannot read your underlying source text. After all segments are stored and an exact hash-verified round-trip succeeds, Todoki clears the queued ciphertext from its active database row. The row retains pointers, hashes, byte size, ownership, status and payment receipts. Backups may retain ciphertext. Size, timing and service/account metadata are not hidden.

Keep the saved request if payment or storage stalls. Resume storage reuses the paid request and provider operation keys. Do not pay again while settlement is under review. Storage availability and retention follow the configured Walrus service; it is not a promise of permanent availability. Keep your encrypted backup.

3. Search privately and choose when to use AI#

1. Wait for Encrypted on Walrus, then choose Unlock this vault. Enter the passphrase in your browser. If remote retrieval is unavailable, select your matching encrypted backup.
2. Type a specific question to find original passages. Search and decryption stay on your device; no model download or WebGPU is needed.
3. For an optional AI draft, review the selected excerpts. In Live Copilot, recent dialogue is excluded by default; you can choose to include up to six short turns and review them too.
4. Check the explicit consent box, then choose Share reviewed excerpts & ask AI. This sends only the question, selected plaintext passages, opaque source IDs and any included dialogue through Todoki to OpenRouter and its selected model provider. These services can read that shared text. Original filenames, the full encrypted vault, the passphrase and derived key stay out of this request. Their data policies apply.
5. Approval is required again for each request. Changing the question, selected excerpts or included live dialogue invalidates the previous approval. Inspect exact supporting quotes before using a draft; quotes identify supplied passages, not proof that every claim is true.
6. During a captured meeting, choose Private Vault in Live Copilot and unlock the vault there. Drafts remain in the panel; nothing is spoken or sent to other participants.
7. Choose Lock vault when finished. The vault also locks when this tab is hidden, the view closes, or its ten-minute lock timer runs. Cancelling or locking cannot retract excerpts already shared with AI.

Understand the security boundaries#

Todoki cannot unlock the stored vault without your passphrase. Optional cloud AI is a separate, explicitly approved plaintext-sharing step, so this is not a claim that Todoki can never read any context. Todoki does not save these AI questions, excerpts or drafts as separate database records. Provider processing and retention follow their policies. Walrus blobs are publicly accessible ciphertext. Removing app references cannot erase every distributed copy or a previously downloaded backup.

An unlocked vault is readable by the code running in your browser. Use a trusted device and browser: malicious extensions, compromised application code, XSS or an infected device can expose plaintext or the passphrase. Locking drops the application’s references to plaintext; browser/OS memory erasure is not guaranteed. Use a strong unique passphrase to resist offline guessing of public ciphertext. This feature has not received an independent security audit.