RNote
RNote Privacy Policy
1. Overview
RNote is a local-first, encrypted knowledge notebook provided by oabnew.com ("we"). We follow data-minimization and local-first principles: without cloud sync, your notes stay on your device; when cloud sync is enabled, note content is end-to-end encrypted before upload, so the server cannot read note plaintext.
This policy covers the RNote apps (macOS / Windows / Linux / iOS / Android), our website and download pages, and the optional cloud sync service.
2. Data We Process
2.1 Local account
The local account only unlocks the encrypted notebook on this device. Local credentials and encryption keys stay on the device and are not uploaded merely because you sign in locally.
2.2 Cloud account (optional)
When you register or bind a cloud account for multi-device sync, we process:
- Account data: username, email (for verification and recovery), hashed password;
- Device data: device ID, device name, platform, last sync time;
- Plan and order data: plan type, subscription status, order ID, payment status.
We do not store card numbers or payment passwords. Payments are handled by third-party payment providers.
2.3 Sync data
Notes and attachments are encrypted on the client before upload. The server stores ciphertext plus necessary sync metadata (server sequence, device ID, update time, payload size) to determine which device needs which changes.
2.4 Diagnostic logs
Cloud sync diagnostics are disabled by default. Only when diagnostics are enabled for your cloud plan does the client write local diagnostic logs, including sync events and — once enabled — WebView console errors, uncaught exceptions, and IPC failures. Logs are stored in the app data folder and can be viewed or cleared in Settings. No local log is written while diagnostics are disabled.
2.5 Feedback and support
When you contact us through in-app feedback or email, we process what you submit (problem description, contact details, optional diagnostics) only to investigate and resolve the issue.
2.6 Website and download statistics
Server access logs may record IP address, User-Agent, request path, status code, and time in order to count downloads per platform, troubleshoot access issues, and prevent abuse. The website does not use third-party advertising trackers.
3. How We Use Data
- Provide local notes, editing, export, and encryption features;
- Provide multi-device sync, device management, and subscriptions when you enable them;
- Verify accounts, send registration codes, and process payments and refunds;
- Diagnose sync failures, crashes, and client errors, and improve stability;
- Count downloads, prevent abuse, and comply with legal requirements.
4. Storage and Security
- The local notebook is encrypted; keys are unlocked by your local account;
- Cloud sync is end-to-end encrypted — the server sees only ciphertext and necessary metadata;
- Passwords are stored as hashes and transmitted over TLS;
- Diagnostic logs are written only after you enable diagnostics and can be cleared at any time;
- We apply reasonable technical and organizational safeguards, but no system is absolutely secure.
5. Sharing
We do not sell personal data or use it for ad tracking. We share data only when necessary:
- Cloud sync server (rnote.oabnew.com): receives encrypted sync data and metadata only;
- Payment providers: receive only the order information needed to complete payment;
- Email service: used to send verification codes or essential account notices;
- App stores (Apple App Store, Google Play, etc.): process downloads and in-app purchases under their own policies;
- Legal requirements: when required by valid legal process.
6. Retention and Deletion
- Local data: delete notes, empty the recycle bin, or uninstall the app (unlock the notebook first);
- Cloud data: delete the cloud account or unbind devices in Settings → Account. Account data, sync data, and device records are then deleted; order records may be retained as required by law;
- Diagnostic logs: clear them in Settings at any time; they are removed with app data on uninstall;
- Access logs: rotated, compressed, and cleaned periodically for operations.
7. Your Rights
You can access, correct, export, or delete your data. The app provides local account deletion, cloud account deletion, device unbinding, diagnostic log clearing, and data export. If you cannot complete a request in the app, contact us at the email below.
8. Permissions
- Photos/files: read only the files you select for images or attachments;
- Network: cloud sync, update checks, verification emails, and website access;
- Notifications: sync status or important notices after you grant permission.
You can disable these permissions in system settings; only the related features will be affected.
9. Children
RNote is not directed to children under 13, and we do not knowingly collect their personal data. Contact us if you believe this has happened.
10. Changes
We may update this policy as features or laws change. Material changes will be announced in the app or on the website. Continued use means you accept the updated policy.
11. Contact
Questions about this policy or your data:
The Chinese version of this policy is the governing version. This English text is provided for reference.