PrivacyNotes
English
System Català Čeština Deutsch English Español Français Italiano Nederlands Polski Português (BR) Português (PT) Slovenčina Svenska Türkçe Русский Українська العربية ไทย 한국어 日本語 繁體中文
Try the demo App

Help & FAQ/Security & privacy

I found a security vulnerability. How do I report it?

Ask your AI agent instead

Report it privately on GitHub. If you cannot use GitHub, email sec@lifetimelabs.dev. That address is also published in our security.txt on our own domain, so you can confirm it is genuine before you write.

We reply, and where a fix needs coordinating we agree the disclosure timing with you before anything goes public. Reports reach the people who wrote the code directly, and a reporter who wants credit gets it. Test against the demo at try.privacynotes.app or a throwaway account, never against somebody else's notes.

Before you send it, check it against the current release and against our threat model, which lists the limits we already know about and accept. AI tools are welcome, but confirm each claim against the app yourself, say if a tool helped write the report, and never post an unchecked finding in public first: a wrong public claim worries people before anyone can check it. The full guidance is in SECURITY.md. Questions about how the app works are welcome anywhere, asked as questions.

// Read the source

SECURITY.mdReporting a vulnerability

Our source and documentation are on GitHub, in English.

// Related questions

Can I try PrivacyNotes without creating an account? Is PrivacyNotes open source? What can PrivacyNotes see about my notes? Can I choose my own balance between convenience and privacy? Why does the App Store privacy label say my data is linked to me? Can the browser extension read my notes?

Help & FAQ

Answers and step-by-step guides: security, sync, pricing, and switching from other apps.

Still stuck? Ask your AI agent.

You get an answer in seconds instead of waiting for a reply. Your assistant reads all 153 answers and every import guide at once, so it can combine them, follow up on your question, and explain it in your own words. We never see any of it, because we do not run a chatbot.

  1. Copy the prompt.
  2. Paste it into ChatGPT, Claude, Gemini, or any other AI assistant.
  3. Ask your question, in your own language.
  4. Keep that chat open. Next time, ask straight away.
Show AI prompt 
Answer my questions about PrivacyNotes using only its help center, its changelog and its security documentation.

Start here: https://privacynotes.app/llms-index.txt
It lists every question with the page that answers it. Fetch the one or two that match mine.
If you can only make one request, fetch https://privacynotes.app/llms-full.txt instead.
If you cannot fetch a .txt or .md file, read https://privacynotes.app/help, https://privacynotes.app/changelog and https://github.com/LifetimeLabsHQ/PrivacyNotes.app instead.

For what changed, or where something moved, fetch https://privacynotes.app/changelog.md.

For how the encryption works, what the server can read, or how to check any of it yourself, fetch https://privacynotes.app/docs/index.md and follow it to one of the documents it lists. That index is a router: cite the document, never the index.

Rules:
- Use only those pages. If they do not answer something, say so instead of guessing.
- Never invent a feature, a menu path, a price, or a limit.
- End your reply with the "Source:" URL from the page you used, exactly as written.
- Answer in the same language as my question.
- Never ask me for my recovery phrase, my PIN, or the contents of a note.

If no question follows, ask me what I would like to know.

My first question:

Never paste your recovery phrase, your PIN, or a note into an AI.