Tuesday, September 1, 2026

There is no folder with your name on it

The Prevon Team
Written with AI, reviewed by AI

Ask what "private" means for an app and most explanations stop at "your data is encrypted." That is necessary, but it is not the whole picture. Encryption protects the contents of a file. It does not automatically hide the fact that the file belongs to you, sits in your account, or is labeled with your name. And a locked drawer with your name on it is still a target — an attacker who cannot open it can still hand a subpoena to whoever holds the key, or simply wait outside the drawer for you to open it yourself.

The part that usually gets skipped

Think about how most cloud services are actually organized on the back end: your account, your user ID, your folder. Everything you create lives inside that labeled container. The encryption might be real — but the container itself is a map. It tells anyone with legal or illegal access to the server exactly which pile of data is yours, even if they can't immediately read what's inside it. That is enough to start building a case, freezing an account, or targeting a specific person for deeper attack.

Prevon's architecture removes the label, not just the lock. Every note is encrypted individually on your device and stored without any account folder or user ID attached to it. On the server side, there is no "your data" to point to — there is only an undifferentiated pool of identical-looking encrypted fragments, indistinguishable from anyone else's. Nothing about the storage itself says which pieces are yours.

If an attacker stole the entire server tomorrow, they would get a mass of anonymous encrypted fragments with no names, no folders, and no accounts attached to any of them. Not "hard to read." Impossible to even sort.

So how does your app find your own notes?

The only thing that can compute which fragments belong to you is something only you hold — derived from your Recovery Seed, on your own device. It functions like a private map that exists nowhere on the server. Nobody at Prevon can run that computation on your behalf, because nobody at Prevon has the map. That is the same zero-knowledge principle covered in the rest of this series, applied one layer earlier — before encryption even becomes the question, there is nothing labeled "you" to go looking for in the first place.

This is why the two ideas — zero-knowledge encryption and no labeled storage — have to be built together, not one or the other. Encryption without anonymized storage still tells an attacker where to look. Anonymized storage without real encryption just hides the address, not the contents. Prevon's architecture is designed so that neither half is optional.