Effective October 27, 2026
This policy covers mdNotes (the “App”) on iPhone, iPad, Apple Watch and Mac, mdNotes for Windows, and the mdNotes web apps, including the local-only version. In short: your notes are files in a place you choose, and you can encrypt them. We never receive them, and the App collects nothing.
1. Information we don’t collect
- No accounts or login, and no names, email addresses or other identifying information.
- No analytics, advertising, tracking or crash reporting. The App contains no third-party SDKs; purchases go through Apple’s own StoreKit.
- No location data or device identifiers.
- We have no access to your notes, pictures or attached files.
2. Where your notes are stored
Each notebook is stored where you choose:
- On your device: in the iPhone app’s folder in the Files app, or in the browser’s own storage for the web app.
- In a folder you pick: for example iCloud Drive, OneDrive or Dropbox, or a folder on your computer. The provider of that folder handles it under its own policy.
- On a Nextcloud, ownCloud or WebDAV server whose address you enter. The App talks to that server directly, and the server’s own policy applies.
For notebooks on a server, the App also keeps a copy of the notes you’ve read on your device, so they work offline. The server password is kept in the iPhone’s secure Keychain, or in the browser’s storage for the web app.
3. Encryption (optional)
An encrypted notebook’s notes are encrypted on your device with AES-256-GCM before they’re saved, using a key protected by your passphrase. Your passphrase never leaves your device, and nobody, including us and your server, can read the notes without it. File and folder names, tasks sent to MyTodo.txt and exports aren’t encrypted. A lost passphrase can’t be recovered.
4. Camera, photos and files
Pictures and files you add to a note are saved next to it, in the notebook’s storage.
5. Apple Watch
For notebooks on Nextcloud or WebDAV, the iPhone passes the server address and account to the watch, which keeps the password in its own Keychain and talks to your server directly. For notebooks in Files, notes and the changes you make on the watch are passed directly between the watch and your iPhone, never through us or the internet. The watch keeps folders, note titles, pinned notes and the last few notes opened on the watch.
6. Wi-Fi sharing (optional)
When you turn on Share on Wi-Fi, your iPhone serves the App to computers on your local network. A computer must be paired with a one-time code before it can open your notebooks. The security certificate is made on your iPhone, and its key never leaves it. Nothing is sent to the internet.
7. Linking with MyTodo.txt
If you turn on the MyTodo.txt link, td: checklist items are written as tasks to the todo.txt you choose, and mdNotes keeps track of which item belongs to which task in its notebook. Nothing is sent to us.
8. The web app
The web app is a set of files served from a web host. Like any website, the host may log your IP address and browser type when the files are downloaded. After that, the web app runs in your browser, and your notes stay in the storage you chose.
9. Purchases (App Store app)
The App Store app is free. Pro, Pro for both apps and the upgrade are one-time in-app purchases handled entirely by Apple through the App Store. We don’t receive your name, email address or payment details; Apple tells the App only which purchases your Apple ID owns.
When you buy Pro for both apps, the App saves a note of it in your device’s Keychain where MyTodo.txt (from the same developer) can read it, so both apps unlock. If you use iCloud Keychain, that note syncs to your other Apple devices the same way your passwords do. It contains only which purchase you own.
10. mdNotes for Windows (optional)
The Windows app connects only to the iPhone or iPad you pair it with, over your local network, and to your Nextcloud or WebDAV server for notebooks kept there. You approve each PC on the iPhone. The Windows app keeps a copy of your notebooks on the PC (in your user folder) so it works while the iPhone is away. Nothing is sent to us.
11. On a Mac
The App Store app can run on Macs with Apple silicon. It handles your data the same way as on the iPhone, except that Wi-Fi sharing isn’t available.
12. The local-only version
The local-only version of the web app has every network feature removed. It stores notebooks only in your browser or a folder on your device, and its pages are blocked from contacting any other site.
13. Children’s privacy
The App isn’t directed at children under 13, and collects no personal information from anyone.
14. Deleting your data
Delete the App, or clear the web app’s site data in your browser, to remove what it stores on the device. Notes in a folder or on a server you chose stay there until you delete them. Uninstall mdNotes for Windows to remove its copy from your PC.
15. Changes and contact
If this policy changes, the new version is posted on this page with a new effective date. Questions: appinfo@cebaxo.com. Developer: Che Geiser.