Please report any security vulnerability. If there is a security breach, I promise to disclose it.
What stays on your Mac
- your notes, messages, contacts, Screen Time, Bear and Logseq data and documents are read on your Mac, and the exports are written to folders you choose on your Mac
- there is no account and no server that holds your content; nothing you export is uploaded
- the Apple Notes database is opened read-only, and the other apps’ data and your documents are only read too
- the MCP server listens on 127.0.0.1, so only apps on your own Mac can reach it, and it only reads your exports
What leaves it
- the app sends anonymous events, never content: no note or folder titles, no paths, no bodies, no exact counts, only rough size buckets. The id it uses is a random token that maps to nothing, not your purchase. Turn analytics off in the app’s settings and nothing is sent
- purchases go through the App Store, and Apple handles the payment
- a diagnostic report leaves only when you send one.
exporter reporton the command line prints it and copies it to your clipboard;exporter report --sendsubmits it, with your address if you add--email. It carries the app version, macOS and hardware, connection state, recent runs and the last crash, and no note contents - feedback leaves only when you send it from the app’s feedback sheet: what you write, your email unless you send it anonymously, and the app’s info and purchase status only if you include them
