Eisen
Sort the work.
Leave it sealed.
A local-first Eisenhower list. One password unlocks your tasks on this device. The server never reads them.
How privacy works
Eisen encrypts every task in the browser before it is saved or synced. The server stores those blobs and cannot read the titles, notes, or which quadrant a task is in.
Your account password stays on this device. The browser uses it to sign you in and to derive the key for your tasks. The server never receives the password or that key.
Open Eisen on another device with the same email and password. That is the whole setup.
Resetting the account password lets you sign in again. It does not decrypt tasks that are already stored. While you still know the password, export a recovery package. That file has its own passphrase.
A reminder stores only when to wake your device. The task title stays on the device.