Privacy & security
Privacy is a core mashnote principle, not an afterthought.
Local-first
Section titled “Local-first”Your notes live on your device and stay available offline. Sync transmits your content to our servers so it can follow you across devices — but the device copy is always the source of truth. See Local-first & sync.
On-device OCR
Section titled “On-device OCR”OCR runs on your device, so the contents of your photos and PDFs are read locally and aren’t uploaded for reading. See Search & OCR.
No lock-in
Section titled “No lock-in”You can export everything in one click to Markdown, HTML or ENEX — and on the Lifetime plan, point mashnote at your own storage. See Export your data.
Account security
Section titled “Account security”- JWT-based authentication with access and refresh tokens.
- Rate limiting on login, registration and other sensitive endpoints.
- Email verification, and one-time-use password-reset links.
See the privacy policy and terms for the legal details.