Every note is locked on your device before it leaves. All that reaches us is unreadable text: we couldn’t open it even if we wanted to.
At six the city hasn’t yet decided what kind of day it will be. It’s the only moment when…
e1:9Qm2vXc0LwJ8tYbR4kHq7nZ1sFpA3eGd6uVyT0oKjM5iWlB8cNhS2rDf4gXz7aQ+P1mEvC9yU3tLk6bJ0wHn8sR=While you write, the note exists in plain text only on the screen in front of you.
Before it leaves, it’s encrypted with your personal key. The key never leaves your device unlocked.
On the server, in backups and on your other devices it arrives locked. It opens only where you sign in.
When you create your account you choose a secret phrase: it unlocks your notes on a new device. You also get a recovery key, to keep somewhere safe, in case you forget the phrase.
Neither ever reaches us. That’s why we can’t read your notes.
Encrypted on your device, unreadable to anyone else.
Only what the service needs to work.
The offline copy and the attachments saved on your phone stay encrypted.
If you turn it on, signing in also needs the code from your authenticator app.
Data is stored in Frankfurt, emails are sent from Ireland.
No tracking, no profiling, no selling of data. Ever.
You reset it by email, as usual. Your notes, though, only unlock with the secret phrase or the recovery key: the password lets you in, the phrase lets you read.
No. We don’t have the key: even if we were required to hand over data, we could only hand over unreadable text and the few details in the “We can see” column.
You can export all your notes to Markdown whenever you like, from Settings. Nothing ties you to us.
From Settings → Account → Delete account. Notes, attachments and account are deleted from our systems; our providers’ backups are overwritten within a short technical window.