PrivacyNotes
App

Roadmap

Where PrivacyNotes is headed. 36 of 49 milestones are done.

36 shipped 9 in flight 4 after 1.0
  1. Shipped

    Internal security audit

    A thorough in-house review of the crypto and sync paths.

  2. Shipped

    Encrypted web app

    Where it started: zero-knowledge notes, tasks, and journal in the browser.

  3. Shipped

    Tasks, not just checkboxes

    Tasks became their own item type, with their own icon, sorting and views, instead of notes with boxes ticked inside them. Completed ones sink to the bottom so what is left stays together.

  4. Shipped

    Journal and trackers

    A dated journal with backfill for the days you missed, and built-in trackers for sleep, weight, steps, water, caffeine, screen time and more, charted over any range from a week to a year.

  5. Shipped

    The vault

    Logins, cards and files behind the same encryption as your notes, with a password generator, site favicons that work offline, per-item PIN locks, and an export any password manager can read.

  6. Shipped

    Import from other apps

    One-click migration from Apple Notes, Standard Notes, Google Keep, Obsidian, Bitwarden, and more.

  7. Shipped

    Burn notes

    Share a note as a self-destructing, client-encrypted link the server can't read.

  8. Shipped

    Sign in without giving up zero knowledge

    Google, Apple and GitHub sign-in, with your key generated on your own device either way. Keep it simple and we hold an encrypted copy of your phrase, or take full custody and we hold nothing at all.

  9. Shipped

    Move to a new device by QR

    Point a new device at the code on an old one, or upload a photo of it when the camera will not cooperate, and your phrase moves across without ever being typed out.

  10. Shipped

    Device management

    See every device on your account and when it last synced, and cut any of them off from a single screen.

  11. Shipped

    Storage you can buy

    Any file type in the vault, at 50 MB per file on Pro and 100 MB once you add storage. The extra space comes in 1, 2 or 5 GB add-ons, for when you need more than your plan includes.

  12. Shipped

    Open core: encryption published

    The encryption layer, schema, and threat model, public so anyone can verify our zero-knowledge claims.

  13. Shipped

    Bug hunt

    We invited beta testers to break it, and fixed what they found.

  14. Shipped

    Pro launch

    A one-time purchase unlocks Pro. No subscriptions, just software.

  15. Shipped

    Public demo

    try.privacynotes.app: the full app, no signup, nothing saved.

  16. Shipped

    macOS app

    A native, notarized Mac app with offline-first sync.

  17. Shipped

    Windows app

    A native desktop app for Windows, built from the same core as macOS.

  18. Shipped

    Linux app

    A native desktop app for Linux, built from the same core as macOS.

  19. Shipped

    Android app

    A native Android app with the same end-to-end encryption, available now as a direct download (APK).

  20. Shipped

    Grid view

    Lay any section out as full-width tiles instead of a narrow list, with image previews decrypted as you scroll. Auto picks grid on wide screens and list on narrow ones.

  21. Shipped

    A real writing editor

    Callouts, tables, math, syntax highlighting in about forty languages, highlights, text color, and a markdown mode for writing in plain source.

  22. Shipped

    Folders

    Organize notes, tasks, journals, and vault items into a nested tree. Folders sync end-to-end encrypted, combine with any view, and deleting one never deletes what is inside it.

  23. Shipped

    Help center

    A searchable help center where every answer has its own page you can link to, and a step-by-step import guide for every app you can move from, in every language we speak.

  24. Shipped

    Your own language

    The app, the website, and every help center answer, hand-translated into every language we ship. Pick one in settings or let it follow your system.

  25. Shipped

    Switchable key custody

    Change who keeps your recovery phrase whenever you like. Moving to self-custody deletes our copy for good, so we ask you to retype three of the twelve words first.

  26. Shipped

    Apps you can leave behind

    Evernote, UpNote, Notesnook, Simplenote, Samsung Notes, and any app that keeps its notes as Markdown files on your disk. Your saved passwords come straight out of the browser too, and your own encrypted backup restores everything at once. Every source has its own guide in the help center.

  27. Shipped

    Sync you can verify

    Sync now takes its timing from the server rather than each device clock, and Verify sync compares this device against the server so the green tick is something you can confirm instead of trust.

  28. Shipped

    A serious writing surface

    Alignment, font family and size, block and inline math you can click to edit, and a pilcrow that shows every space and line break while you proofread. Text, images and attachments can all be dragged into place, and every shortcut is listed in the hotkeys panel.

  29. Shipped

    Arabic, and every screen mirrored

    Arabic brought the interface across in full: every layout, icon and menu mirrored for right-to-left reading, not just the words swapped out. Turkish and Swedish landed alongside it, and search learned to handle scripts that do not put spaces between words.

  30. Shipped

    Your own folder of Markdown files

    Point the app at a folder of .md files on your disk and edit them in place. Nothing is uploaded, converted or encrypted, so the same files stay readable in Obsidian, in a git repo, or by an AI agent. Free, on the desktop app and in Chromium browsers.

  31. Shipped

    UpNote importer

    Move a whole UpNote account over from its free local backup: notebooks become folders, and tags, pins, note links, formatting, images, and attachments come along. Per-note exports from the phone apps import too.

  32. Shipped

    Authenticator codes in the vault

    Keep the two-factor keys for your other accounts beside the passwords they belong to. Paste a setup link or a bare secret, and the rotating code appears with its countdown, so signing in somewhere no longer means reaching for a second app. The keys sync on every plan; Pro turns them into live codes.

  33. Shipped

    Sync on your terms

    Pause sync on one device whenever you want, and it stays paused until you say otherwise, because a switch that says "this device talks to nobody" must not undo itself. The sync panel says what each pass carried and how long it took, and on Android your files can wait for wifi while your words go now.

  34. Shipped

    Bookmarks

    Save links in the same encrypted store as your notes, with the site icon, and with the folders, tags, search and favorites you already use. Your browser writes all of its bookmarks to one file, and the importer rebuilds the whole tree from it. They go back out the same way, so nothing is locked in here.

  35. Shipped

    Docs your AI agent can read

    The help center and the full changelog are published as plain text beside the web pages, so an assistant you ask about the app reads what the app actually does instead of guessing. Every answer carries the address of the page it came from, which is how you check it.

  36. You are here
  37. In progress

    Adding features

    A release every week or two, and most of what goes into one started as somebody asking for it. The changelog is the full record.

  38. In progress

    Fixing bugs

    Reports get triaged quickly and fixes ship in the next release rather than waiting for a milestone. Found something? The bug tracker is open.

  39. In Apple review

    iOS app

    A native iPhone and iPad app with the same end-to-end encryption.

  40. In progress

    Google Play Store

    The same Android app on Google Play, for one-tap install and automatic updates.

  41. Up next

    Graph view

    See how your notes connect. Every note-link drawn as a map you can pan and follow, so the shape of what you have written becomes something you can navigate.

  42. Up next

    Automatic backups

    You can already export everything in one file, but only when you remember to. This makes it automatic: pick a folder and a rhythm, and a fresh copy is written without you thinking about it. Sync is not a backup, it mirrors deletions as faithfully as edits, so a copy on your own disk is the one thing no server event can undo.

  43. Up next

    App polish

    A stretch aimed at the apps we have already shipped rather than new pillars: platform quirks, rough edges, and everything the bug tracker has collected, until each app feels native to the device it runs on. This is the work the early adopter price waits on.

  44. Up next

    The early adopter deal retires

    We keep the launch discount until the native apps are stable everywhere. Then Pro moves to its full price, and the people who trusted us early keep the best deal we'll ever offer.

  45. Up next

    Fair global pricing

    Arrives together with full pricing: a price that is fair in one country can be a week of pay in another, so Pro will be priced to local purchasing power and shown in your currency, on the website, at checkout, and in the app stores. Buying today still beats waiting - the early adopter price is the lowest Pro will ever cost, in any country.

  46. After 1.0
  47. After 1.0

    Code you can read

    Before the source goes public, we clean house: clearer structure, honest comments, dead code gone. Partly pride, mostly because readable code is auditable code.

  48. After 1.0

    Faster everywhere

    A dedicated pass on speed and size: quicker startup, snappier search, smaller downloads. Tune the machine before the inspection.

  49. After 1.0

    Independent security audit

    An independent, end-to-end audit of the entire stack, published in full. We're bootstrapped and a proper audit is a major expense, so we won't put a date on it we can't honor. But the day we can afford to do it right, we do it.

  50. After 1.0

    Open-source the apps

    Today our encryption core is open core. Once the apps above have shipped and the audit is done, we'll open the source of the apps themselves, so anyone can verify how your notes are protected.