Authentication
Khybur authentication is powered by Supabase Auth. Khybur does not store account passwords directly in its application database.
Clear access. Honest security information.
Khybur separates public product information from private user workspaces and uses authenticated, role-aware access for personal and shared Notespaces.
Private Notespaces
A personal Notespace is associated with its owner. Shared access is granted through explicit Notespace membership rather than making private notes publicly crawlable.
Viewer and editor roles
Viewers receive read-only access. Editors can create and update content in the shared Notespace. Owners can manage membership and access.
Server-side access controls
Khybur uses authenticated database requests and permission policies to enforce access to Notespace data. The private workspace is also excluded from search indexing.
Password recovery
Password reset requests use Supabase Auth's email recovery flow. Khybur never asks users to send a password by email.
Payments
Checkout and billing are handled through Khybur's payment processor. Khybur does not store full payment-card numbers in the notes application.
Data portability
Users can import Markdown or text files and export individual notes as Markdown for a portable local copy.
Questions or security reports
For account-security questions or to report a suspected issue, contact admin@khybur.com. Khybur does not claim certifications that it has not completed.