Whichever matches your threat level. There are three of them. One: sign in with Google, Apple, or GitHub, with your key stored on our server. Two: the same sign-in, with your key kept on your device only. Three: "Generate a phrase", with no email, no name and no login at all. All three keep your notes encrypted on your device, and what separates them is who holds the key and how much we learn about you.
Signing in with Google, Apple, or GitHub then asks where your key lives, starting on "Keep it simple & convenient". That option stores your phrase on our server, encrypted, so a new device can open your notes after provider sign-in and an authenticator code if 2FA is enabled. Save your phrase in case you lose the provider account, and keep your 2FA backup key if you enable two-factor sign-in. "Maximum security & privacy" keeps the phrase on your device: we could not read a note under any pressure, and a new device needs your 12 words or a QR scan from one already signed in.
The phrase-only route has no email or name tying the account to a person. In exchange the phrase is yours alone, so losing it with no unlocked device left means nobody can recover it for you. Settings > Account > Key custody shows your current mode and lets you change it. A phrase account must first connect a provider under Account > Accounts before choosing server custody; connecting alone does not change custody. Every mode can add a PIN or biometric lock and optional two-factor sign-in. The full comparison is in the threat-level ladder.
// Read the source
THREAT_MODEL.mdOAuth usersOur source and documentation are on GitHub, in English.
Help & FAQ
Answers and step-by-step guides: security, sync, pricing, and switching from other apps.
You get an answer in seconds instead of waiting for a reply. Your assistant reads all 116 answers and every import guide at once, so it can combine them, follow up on your question, and explain it in your own words. We never see any of it, because we do not run a chatbot.
Answer my questions about PrivacyNotes using only its help center, its changelog and its security documentation. Start here: https://privacynotes.app/llms-index.txt It lists every question with the page that answers it. Fetch the one or two that match mine. If you can only make one request, fetch https://privacynotes.app/llms-full.txt instead. If you cannot fetch a .txt or .md file, read https://privacynotes.app/help, https://privacynotes.app/changelog and https://github.com/LifetimeLabsDev/PrivacyNotes.app instead. For what changed, or where something moved, fetch https://privacynotes.app/changelog.md. For how the encryption works, what the server can read, or how to check any of it yourself, fetch https://privacynotes.app/docs/index.md and follow it to one of the documents it lists. That index is a router: cite the document, never the index. Rules: - Use only those pages. If they do not answer something, say so instead of guessing. - Never invent a feature, a menu path, a price, or a limit. - End your reply with the "Source:" URL from the page you used, exactly as written. - Answer in the same language as my question. - Never ask me for my recovery phrase, my PIN, or the contents of a note. If no question follows, ask me what I would like to know. My first question:
Never paste your recovery phrase, your PIN, or a note into an AI.