Description
Per 0007 — Authentication, account recovery, and data-deletion behavior: since the journal is local-only with no server backup, losing the device without ever having made an encrypted backup (0003) means the journal is unrecoverable. This is an accepted risk, not something to engineer around — but it needs to be said plainly during onboarding so users aren't surprised later.
Scope: add one honest, plain-language line to onboarding copy communicating that the journal stays on-device and backup (if wanted) is the user's responsibility. Does not include building the backup/restore feature itself (0003, Risk 2 — separate, contingent ticket).
Acceptance Criteria
Additional Info and Resources
- Source: 0007-authentication-recovery-deletion.md, "Account recovery" section and Consequences
- Related: this line should stay accurate to whatever backup capability actually exists — currently none is built; revisit wording if/when 0003 Risk 2 (device-transfer backup/restore) ships
- Product owner (Roberta Talmage) should review final wording for tone/plain-language fit
QA
Description
Per 0007 — Authentication, account recovery, and data-deletion behavior: since the journal is local-only with no server backup, losing the device without ever having made an encrypted backup (0003) means the journal is unrecoverable. This is an accepted risk, not something to engineer around — but it needs to be said plainly during onboarding so users aren't surprised later.
Scope: add one honest, plain-language line to onboarding copy communicating that the journal stays on-device and backup (if wanted) is the user's responsibility. Does not include building the backup/restore feature itself (0003, Risk 2 — separate, contingent ticket).
Acceptance Criteria
Additional Info and Resources
QA