Notes privacy policy
Last updated: October 4, 2026
Your notes and local storage
Notes stores your note text, checklist items, note colors, workspace names, and app preferences on your device. The app does not require an account with the developer. This version includes no advertising, analytics service, or automatic crash-reporting service. We do not sell your notes or use them to train AI models.
Sharing and linked devices
When you choose to share a notebook, its contents synchronize with devices you approve. Synchronization uses encrypted peer connections and encrypted replicated feeds. Approved devices receive owner access: they can read and edit the notebook, invite additional devices, and remove other devices. Device names, member and device identifiers, invitation identifiers, approval decisions, and synchronization metadata are used to establish and manage those connections. Pairing requests use a public mailbox; do not put sensitive information in your device name.
Network infrastructure
Peer discovery uses the Hyperswarm/HyperDHT network and its bootstrap infrastructure to locate devices. Discovery infrastructure and connected peers can see network information such as IP addresses and ports, connection timing, and discovery identifiers. Shared notebook contents travel encrypted. This app does not configure a developer-operated cloud notebook store or blind storage mirror. Your internet or mobile provider and operating system handle connections under their own policies.
Camera and clipboard
Camera access is optional and is used to scan a sharing QR code. Notes does not record or upload camera images. You can paste a sharing code instead. When you choose to copy remaining note text, a sharing code, or a recovery phrase, it is placed on your system clipboard. Other apps or system clipboard services may be able to access that clipboard. Recovery words shown or entered in the app are hidden or cleared when you leave their screen or background the app.
Credentials and recovery
Notes keeps its local storage key in the operating system's secure credential storage. Shared data and credential metadata use encryption; this is not a claim that every file in the app directory is independently encrypted. A recovery phrase restores your member identity, but it does not back up notebook contents. Recovery needs a surviving device with a copy of the notebook and owner approval of the replacement device. If all copies are lost, the words cannot recover the notes.
Retention and deletion
Moving a note to Trash hides it from the current notebook view and synchronizes that change to linked devices. Notes and checklists stay recoverable from Settings → Trash until you permanently delete them. Permanent deletion removes visible records, but the synchronization system retains operation history, so it is not secure erasure of every historical copy. To remove this device’s local app data, use the operating system’s app storage controls or uninstall the app. Exported files and other devices control their own copies.
Removing a linked device
Removing a device rotates the notebook's encryption and prevents that device from receiving future shared changes. It does not remotely erase content already received. The removed device can keep its cached history in a separate writable private workspace. Changes in that private workspace do not reach the shared notebook.
Backups and transfers
Notes offers a portable JSON export and import in Settings → Export and import. Exports include the selected workspace’s notes and Trash with readable text, checklist states, colors, and dates. They exclude access credentials and recovery words and are not encrypted. When you open the system share sheet, your chosen app or destination handles the file under its own policies. A temporary export remains in app cache until the next export or cache cleanup; selected import files are copied to cache for reading and removed afterward. Android system backup and device-to-device transfer are disabled for all app data. Notes has no developer-operated cloud backup. Backup behavior on other platforms depends on the operating system and your settings. Keep exports private and keep a surviving linked device for shared access recovery.
Support and policy changes
Contact the developer, moromisato, through the support link in Settings → Help and support. The GitHub issue tracker is public, and GitHub processes posts under its own privacy policy. Do not send recovery words, private keys, sharing codes, or private note contents. We may update this policy when the app's behavior changes; the date above identifies this version.