VISION
Accounts

People

Everyone with an account. Each person has their own passkeys, PIN, and completely separate data. The checkboxes control which apps they can use — changes take effect on their next sign-in (their current session keeps its old access for up to 18 hours).

Loading…

Don't know their name yet? — they enter their own name when they open the link.
One-time link, valid for 7 days. Opening it enrolls a passkey (and PIN) for the account on achieve.vision — that's how a new person joins, and how an existing account picks up a passkey on the new domain. It's only shown here once — regenerate if it's lost.

API Access

A personal key that lets an external trigger — an iOS Shortcut, a webhook — drop a to-do straight into Horizon without opening the app. Send a POST to the endpoint below with the key as a bearer token.

checking…
Endpoint

Send Authorization: Bearer <key> with a JSON body like {"title":"Buy milk","area":"personal","importance":3} — only title is required. Rotating the key immediately breaks any automation still using the old one.

At-Rest Encryption

All written content (tasks, notes, journal entries, team data) is encrypted with AES-256-GCM before it's stored.

checking…

New and edited entries encrypt automatically.

Re-embeds every note, task, and entry so semantic search can filter straight to your account's own content (new items index this way automatically). One-time after the 2026.07.18 update; safe to re-run. Uses a batch of AI calls proportional to how much content exists.