๐Ÿ›ก๏ธ Security and Privacy

Bloquinho was designed with security first. Your privacy is our top priority, with local storage, encryption of sensitive data, and total control over your information.

๐Ÿ”’ Security Principles

Bloquinho follows the highest security standards to protect your data:

๐Ÿ“Š Security Architecture

flowchart TD subgraph User U["๐Ÿ‘ค User"] end subgraph App["๐Ÿ“ฑ Bloquinho App"] direction TB UI["๐ŸŽจ Secure Interface"] Auth["๐Ÿ” Local Authentication"] Crypto["๐Ÿ”’ Encryption"] Storage["๐Ÿ’พ Local Storage"] OAuth2["โ˜๏ธ Secure OAuth2"] end subgraph Data Local["๐Ÿ“ Local Data\n(Encrypted)"] Cloud["โ˜๏ธ Cloud (Optional)\n(Secure Tokens)"] Cache["๐Ÿ–ผ๏ธ Avatar Cache\n(Secure Metadata)"] end subgraph Protection Secure["๐Ÿ›ก๏ธ FlutterSecureStorage"] Hive["๐Ÿ“ฆ Hive (Local)"] Tokens["๐Ÿ”‘ OAuth2 Tokens\n(Secure Storage)"] end U --> UI UI --> Auth UI --> Crypto UI --> Storage UI --> OAuth2 Auth --> Local Crypto --> Secure Storage --> Hive OAuth2 --> Tokens Tokens --> Cloud Local --> Cache Secure --> Local Hive --> Local classDef secure fill:#d4edda,stroke:#28a745,stroke-width:2px; class Auth,Crypto,Secure,Tokens secure;

๐Ÿ’พ Secure Local Storage

Your data always stays on your device:

  • FlutterSecureStorage: Encrypted sensitive data
  • Hive Database: Fast and reliable local storage
  • Local Folder: Organized structure on your device
  • Manual Backup: Total control over backups
  • No Internet: Works completely offline

๐Ÿ” Data Encryption

Advanced protection for sensitive information:

  • OAuth2 Tokens: Stored with AES encryption
  • Passwords: Encrypted before storage
  • Metadata: Protected cache information
  • Profile: Encrypted personal data
  • Secure Keys: Automatic key management

โ˜๏ธ Secure and Persistent OAuth2

Bloquinho's OAuth2 system was designed for maximum security and convenience:

๐Ÿ”‘ Secure Tokens

Access tokens are stored using FlutterSecureStorage, which uses Keychain on iOS/macOS and Keystore on Android. Tokens are encrypted and never exposed in plain text.

โœ… Encrypted โœ… Auto Renewal โœ… Single Login

๐Ÿ”„ Smart Persistence

The system automatically restores valid sessions on startup, testing token validity and automatically removing expired tokens. You log in once and stay connected.

โœ… Auto Restoration โœ… Token Validation โœ… Auto Cleanup

๐Ÿ›ก๏ธ Debug and Monitoring

Complete logging system to track OAuth2 operations, allowing problem diagnosis and ensuring total transparency about what happens with your credentials.

โœ… Detailed Logs โœ… Transparency โœ… Diagnosis

๐Ÿ–ผ๏ธ Secure Avatar Cache

The avatar cache system ensures that your profile photos are downloaded and stored securely:

๐Ÿš€ Security Flow

1

Secure Initialization

App starts with verification of saved tokens and integrity validation

2

Session Restoration

OAuth2 tokens are restored and tested automatically

3

Data Validation

System verifies integrity of local data and encryption

4

Smart Cache

Avatars are downloaded and stored with secure metadata

5

Secure Interface

User accesses data with total privacy and control

๐Ÿ”’ Your Privacy is Our Priority

Bloquinho was created to give you total control over your data. No information is sent to external servers without your explicit permission. Your data stays on your device, under your control.

๐Ÿ›ก๏ธ Security Features

  • Mathematical Protection: Validation against division by zero and invalid values
  • Error Handling: Automatic recovery from invalid states
  • Debug System: Detailed logs for diagnosis
  • Lifecycle Management: Complete control over data lifecycle
  • User Feedback: Visual feedback for security operations

๐Ÿ” Total Transparency

  • Open Source: All code is auditable
  • Detailed Logs: Complete operation tracking
  • No Telemetry: No data sent without permission
  • Data Control: Export, import, delete when you want
  • Documentation: Complete security guides

๐ŸŒŸ Commitment to Security

Bloquinho represents a new standard in productivity applications, where privacy and security are not optional, but fundamental. Every line of code was written thinking about protecting your data and your total control over information.

๐Ÿ”’ 100% Local ๐Ÿ” Encrypted ๐Ÿ“ฑ Offline ๐ŸŒ Open Source ๐Ÿ›ก๏ธ Secure