Privacy
Self-hosted means private by default. Your notes never leave your infrastructure — there is no cloud endpoint to breach, no SaaS vendor to trust.
Core principles
No telemetry by default
No telemetry is collected, transmitted, or logged — ever. There are no analytics trackers, no error-reporting endpoints, and no heartbeat calls. The application is fully offline-capable and never needs to phone home.
Self-hosted data ownership
All data lives in a Postgres database on infrastructure you own and operate. You control the backups, the retention, and the access. The self-hosted model means no third party ever holds your notes.
AI calls are opt-in
AI features (summarization, tagging, chat, embeddings) are explicitly opt-in. Every AI call is logged in the AIInteraction table so you can audit exactly what was sent and received. Locked and private notes are never included in AI requests without your explicit consent.
Export and delete your data
Export your entire vault as plain Markdown at any time — no proprietary format, no lock-in. Because you own the database, you can also delete it directly. Your data is yours, completely.
What this is not
- ✗Not a SaaS — no cloud subscription, no remote data storage
- ✗Not a multi-user platform — single-owner, no shared accounts
- ✗Not an analytics platform — no event tracking, no user profiling