Notabula is a local-first notes app. Your notes live on your device and — if you choose — in your own private iCloud or on your own self-hosted Notabula server. The developer operates no service that holds your notes, and the app includes no tracking, advertising, or analytics.
Short Version
- Your notes are stored on your device first, and the app works fully offline.
- Sync is your choice of your own private iCloud (the default — no account, no sign-in) or your own self-hosted Notabula server. We never receive your notes either way.
- The app developer operates no servers and collects no personal data.
- No tracking, no advertising, no analytics SDKs.
Information Stored on Your Device
- Your notes — note contents, folders, tags, and attached images are stored locally in Apple's on-device database. This local store is the source of truth, so everything works offline.
- Sign-in credentials — only if you connect a self-hosted server, your session credentials are stored on this device to keep you signed in, and are cleared when you sign out.
- Photos you attach — images you add from your photo library, and documents you scan with the camera, are stored with the note they belong to.
Optional iCloud Sync (the Default)
In iCloud mode, your notes sync across your Apple devices through your own private iCloud account using Apple's CloudKit. No sign-in or account with us is involved. This data resides in your iCloud and is governed by Apple's Privacy Policy; the developer has no access to it.
Optional Self-Hosted Server
In server mode, the app talks only to the Notabula server whose address you provide, using an account on that server. Features like sharing, public links, revision history, and link previews are provided by that server. For a self-hosted instance, the operator is you or your household — the developer is never a party to that data. The two modes use separate on-device stores, so their data never mixes.
Locked Notes
Notes you lock are encrypted on your device with a key derived from your passphrase (PBKDF2, then AES-256-GCM). The server only ever stores ciphertext — without your passphrase, no one can read a locked note, including the server operator.
Camera and Photo Access
The app requests photo access so you can add photos to your notes, and camera access so you can scan documents straight into your notes. Images are used only for these purposes and only when you choose them.
Notifications
Note reminders fire as local notifications scheduled on your device. If you use a self-hosted server, it can also deliver push notifications through Apple's Push Notification service (APNs); delivery through APNs is subject to Apple's Privacy Policy.
Share Extension
The "Share to Notabula" extension sends only the content you explicitly share, and only to your own configured server.
What We Do Not Do
- No advertising and no ad networks.
- No analytics or third-party tracking SDKs.
- No selling, renting, or sharing of your data.
- No developer-operated account or server that holds your notes.
Data Retention and Deletion
Your notes remain until you delete them. Signing out of a server clears its credentials from this device. Deleting the app removes its on-device data; notes synced to your own iCloud or your own server are managed there by you.
Children
Notabula is not directed at children and does not knowingly collect personal information from anyone.
Changes to This Policy
If this policy changes, the "Last updated" date above will change and the revised policy will be posted here.
Contact
Questions about privacy? Contact info@jwapps.app.