Kontax is built around the principle that your contacts are yours. Here's how we keep them safe — in plain terms, no hand-waving.
End to end
How your contacts stay protected, from your device to every sync
From the moment a request leaves your device to the moment it's written to disk, your contacts are encrypted.
Your contacts live in a managed PostgreSQL database with encryption at the storage layer. Sensitive fields go further — your TOTP secret is sealed with AES-256 before it ever touches disk, and backups carry the same encryption.
Every request — web, mobile, CardDAV, and API — travels over TLS 1.2 or higher. Plain HTTP is redirected, never served, and an HSTS header keeps browsers on HTTPS from the very first visit. Certificates renew automatically.
Strong defaults on your account, and careful handling of the credentials you give us to sync.
Passwords are hashed with bcrypt — never stored or logged. Turn on TOTP two-factor in under a minute, with single-use recovery codes. Sensitive actions re-ask for your password mid-session, and sign-in endpoints are rate-limited against brute force.
OAuth tokens for Google and Outlook are encrypted before storage and used only for the accounts you link. For CardDAV you issue scoped app passwords instead of your main password — revoke one and that client is cut off on its very next request.
Take your data with you whenever you like, and tell us if you find a problem.
Export everything — contacts, labels, and account data — as vCard, CSV, or a full GDPR archive, on any plan including Free. Account deletion runs on a clear schedule, export links expire on their own, and we never sell your data or run ads against it.
Found something? Email [email protected] with steps to reproduce and we'll acknowledge quickly. We won't pursue legal action against good-faith research that respects user privacy and avoids data destruction — just give us time to ship a fix first.
No badges we haven't earned. We deliberately don't claim SOC 2, ISO 27001, or certifications that are still in progress. Everything on this page is true of Kontax today — nothing aspirational.
Start free — no credit card, no tracking, and a full export whenever you want one.
Get started free