Privacy Policy

In short

• We do not sell your data, show ads or use third-party analytics.
• The web app stores your workspace on our servers so you can use it anywhere.
• The desktop app is local first. Your notes stay on your computer unless you turn on Cloud Sync, and it sends us nothing else unless you allow it.
• We never read your notes to analyse or market to you.

What we collect

• Account: your name, email and password (stored as a secure hash), or your Google account details if you sign in with Google. Two-step sign-in settings if you use them.
• Workspace: notes, tasks, files and settings you keep in the web app or sync from the desktop app.
• Billing: your plan and payment history. Stripe handles payments, so we never see your card number.
• Usage of the web app: pages viewed on our public site, the days you use Knotpad, how much of your plan you use (such as notes, files and AI assistant calls) and account events such as sign-up, trial and payment. We use this to run the service, apply fair use limits and improve Knotpad. Your country is worked out from your connection; we do not store your IP address.
• AI assistants: when an assistant you connected calls Knotpad, we record which tool it used and when. We do not store what it read or wrote, or what it searched for.
• Error reports (web, optional): details when something goes wrong, such as the type of error, where it happened and your device type, linked to your account so we can fix it and follow up. You can turn this off.
• Feedback: anything you send us through Feedback in the app.
• Your consent: when you accepted these terms, which version, and your choices.

The desktop app

Your notes, tasks and settings are stored on your computer. Nothing is sent before you accept the Terms on first use. After that, you choose:

• Anonymous diagnostics (on unless you turn it off): crash reports and a regular check-in with a random device ID, the app version, your operating system and how Knotpad was installed. Not linked to you or your account.
• Help improve the beta (off unless you turn it on): once a day, your device specs and usage totals, such as how many notes and tasks you have and how fast the app runs. Linked to your account when you are signed in. Never includes your notes.

If you sign in, your account settings sync between your devices. If you turn on Cloud Sync, your notes and tasks are stored on our servers as described above. The app checks GitHub for updates.

Microsoft Store

If you install from the Microsoft Store, Microsoft shares app statistics with us, such as installs, crashes and ratings by country, and the reviews you publish there. These do not identify you to us.

Emails

We send emails you need: sign-in and security messages, billing receipts, trial reminders and notices about your workspace. Pro accounts receive a weekly task digest. We may also email you if you have not used Knotpad for a while. You can turn off the digest and reminder emails in your account or from the link in each email.

Storage and security

Data travels encrypted. Note titles and content are also encrypted on our servers with a key only our servers hold. Files are kept in private storage and shared only through short-lived links. On the desktop, sign-in tokens are kept in your operating system's credential manager.

How long we keep it

• Your account and workspace: until you delete them.
• Deleted notes: 30 days in trash, then removed.
• Website and product analytics: 24 months.
• Desktop usage reports and daily activity: 180 days.
• Individual error sightings: 90 days.
• Cloud workspaces after a subscription or trial ends: removed after a grace period (see the Terms), once we have emailed you a copy.

Who else sees it

We share data only with the services that run Knotpad, and only what each needs:

• Stripe for payments, Brevo for email, Cloudflare for file storage, and the servers that host Knotpad.
• Google, if you sign in with Google. Microsoft, for the Microsoft Store. GitHub, for desktop downloads and updates.
• Videos and documents you embed in a note load from their own service, such as YouTube or Google Docs, under its terms.
• AI assistants and tools you connect can read and change what you give them access to, under their own terms.

Your choices

• Change your web choice under Account → Data & Privacy, and your desktop choices under Settings → Privacy.
• Export your notes at any time.
• Delete your account under Account → Data & Privacy. It takes effect immediately, cancels your subscription, and removes your workspaces, files and analytics. Error reports stay, without any link to you.
• Ask us for a copy of your data, or to correct or delete it, by email.

Changes

When we change this policy in a way that matters, we will ask you to review and accept it again in the app.

Contact

Questions about your privacy: hello@knotpad.app