Privacy

Please report any security vulnerability. If there is a security breach, I promise to disclose it.

What stays on your Mac

• your notes, messages, contacts, Screen Time, Bear and Logseq data and documents are read on your Mac, and the exports are written to folders you choose on your Mac
• there is no account and no server that holds your content; nothing you export is uploaded
• the Apple Notes database is opened read-only, and the other apps’ data and your documents are only read too
• the MCP server listens on 127.0.0.1, so only apps on your own Mac can reach it, and it only reads your exports

What leaves it

• the app sends anonymous events, never content: no note or folder titles, no paths, no bodies, no exact counts, only rough size buckets. The id it uses is a random token that maps to nothing, not your purchase. Turn analytics off in the app’s settings and nothing is sent. Since 4.5 they also say how the app looks on your Mac (light or dark, the screen and window size, the chip and the accessibility settings that change how it draws) and which of about thirty listed apps are installed
• purchases go through the App Store, and Apple handles the payment
• crash, freeze and speed reports: when the app crashes, freezes or opens slowly, macOS writes a report and hands it to the app, which sends it to diagnostics.jarkeeper.com, where I read them for all my apps. A report holds where in the app’s own code it happened, the app version, macOS and the kind of Mac, and on macOS 27 which screen or setup step was open. It never holds note contents, titles or paths. It follows the same analytics switch: turn it off and none are sent
• a failed sync reports itself: when a sync stops, or fails more than a tenth of what it was asked, the app sends a run report to diagnostics.jarkeeper.com: how many items, which kinds of failure, the database’s own error codes and words, how big the Notes database and its log are, whether Notes was running, and the free disk. Never a title, a path or a word of a note. It follows the same switch as the crash reports
• a support report leaves only when you send one. exporter report on the command line prints it and copies it to your clipboard; exporter report --send submits it, with your address if you add --email. It carries the app version, macOS and hardware, connection state, recent runs and the last crash, and no note contents
• feedback leaves only when you send it from the app’s feedback sheet: what you write, your email unless you send it anonymously, and the app’s info and purchase status only if you include them