Security

What leaves your Mac, and what never does

PixoNotes has no account, no telemetry and no server of ours. Here is exactly what that means.

The whole list

Where your data goes

Your notes are files on your Mac. The app makes two kinds of connection, and neither carries a note.

WhatWhereWhat is sent
Your notes and filesYour MacNothing. With sync on, they also go to the folder you chose.
Update checkcdn.pixonotes.comNothing. The app reads one small file to see if a new version exists.
Pro licencePolar, our payment providerThe licence key and a label for the Mac. Never on the free plan.
Apple IntelligenceYour MacNothing leaves. macOS runs Apple's models on the Mac.
The full list is in the privacy policy (English)

Sync

A folder you own, not a server of ours

One small file per note, in iCloud Drive or any folder you pick. We never see it. The newest edit wins, and deletions travel as records.

Your Mac

Notes as plain text

A folder you own

iCloud Drive by default, or any folder

Your other Mac

Notes as plain text

The rules

How notes are looked after

Plain text

Notes are plain text on disk. Marks stay visible, so nothing is locked in.

Unreadable never means empty

A file that cannot be read is set aside, and never treated as deleted.

Daily backups

Kept for two weeks, and you can back up or restore at any time.

Recently Deleted

A deleted note waits 30 days before it goes.

Licence in the Keychain

Your Pro key is kept in the Mac's Keychain.

No account to lose

No password of ours exists, so none can leak.

Updates

An update is checked before it installs

1

Our signature

Every update is signed with our release key, and one changed byte is refused.

2

Apple's code signature

The app must be signed by us, for this app, and be the promised version.

3

A card, then a restart

It installs itself, then a card says to restart PixoNotes to use it.

Found a security problem? Write to [email protected]

Write it down before you lose it.

Stickies on your desktop, a board for your projects, and a scratchpad good enough to leave your code editor closed.