Dash Notes — Privacy Policy

Last updated: 12 May 2026

Dash Notes (“Dash”, “the app”, “we”) is a privacy-first, offline-first note-taking application. This policy explains what data the app handles, where it lives, and what we do — and don’t do — with it.

The short version

No passwords. No traditional accounts. Sign-in (only required for paid Dash Sync) is a 6-digit code emailed to you.
No analytics, no tracking, no third-party SDKs.
Notes live on your device. Optional sync is end-to-end encrypted; we cannot read your notes.
We never sell, share, or monetize your data.

What stays on your device

All notes, folders, tags, attachments, version history, and settings are stored locally on the device you create them on:

iOS / iPadOS: in the app sandbox via WKWebView IndexedDB.
macOS / Windows / Linux: in the user data directory (atomic-write JSON files protected by macOS Data Protection / OS-level file permissions).
Browser / PWA: in the browser’s IndexedDB for the dashnote.io domain.

Per-page encryption (passphrase-based) and app-level lock (passphrase + biometric) are performed entirely on-device using WebCrypto (PBKDF2 + AES-GCM). Decryption keys never leave the device.

Optional sync — and what the server sees

You can optionally pair two or more of your own devices to sync notes between them. Sync is opt-in, off by default, and end-to-end encrypted:

A vault key is generated on your first device and shared to additional devices via a one-time pairing code (decrypted only on the receiving device).
All page content, attachments, version history, and metadata are encrypted on-device with the vault key (AES-GCM-256) before upload.
The relay server stores only opaque ciphertext envelopes addressed by random vault and version IDs. The server cannot read your notes — it has no key.
The server retains only the data needed to relay between your devices (encrypted blob, timestamps, size). It does not log content, IP-derived location, request bodies, or device fingerprints beyond what’s required for rate-limiting.
You can stop sync at any time. Stopping on the last paired device automatically purges the encrypted vault from the server.

Sync infrastructure is hosted on Deno Deploy. The relay does not transmit data to any third party.

Permissions Dash may request

Camera — only used to scan a QR pairing code when adding a new sync device. Not used for anything else, never recorded.
Photo Library — only when you explicitly attach an image to a note. Selected images are stored locally inside the app.
Face ID / Touch ID — only to unlock the app or unlock encrypted pages, when you enable that feature. Authentication happens on-device via the OS Local Authentication framework.

None of these permissions transmit data anywhere.

Dash Sync (paid subscription)

Dash Sync is an optional subscription that keeps your notes in sync across devices. You can use the app indefinitely without it. When you subscribe, the following third parties handle billing or sign-in on our behalf:

Stripe — processes payments on Mac, Windows, Linux, and web. Stripe receives your email, billing address, and card details. We never see your card. For active subscribers, our relay stores your email, your Stripe customer/subscription IDs, and your subscription status (active/past-due/canceled) — solely to verify your sync entitlement.
RevenueCat + Apple In-App Purchase — used only on iOS. RevenueCat receives an anonymous device-generated ID and your subscription receipt from Apple. They do not receive your email.
Resend — sends the 6-digit sign-in code (and, one time only when sync launched, a transactional notice to existing Mac buyers). Resend sees only the destination email and the short code body. We do not use Resend for marketing.

The sync vault itself is end-to-end encrypted as described above — none of these third parties (or we) can read your notes.

Analytics, tracking, advertising

We do not use any analytics, telemetry, crash reporting, advertising SDK, or third-party tracker. Dash makes no network calls except: to the optional sync relay (only when sync is enabled, and only with end-to-end encrypted blobs); to Stripe/RevenueCat/Resend solely for the paid Dash Sync subscription described above; and, on macOS/Windows/Linux, to GitHub Releases for app update checks.

Data we collect

None, in the analytics sense. We do not collect personally identifiable information, advertising identifiers, contacts, location, or device identifiers. The only server-side data is the encrypted sync envelope described above (visible to us only as ciphertext) for users who opt in to sync.

Data deletion

Because there are no accounts, you delete your data simply by deleting notes within the app, or by uninstalling the app. If you have used sync, disabling sync on the last paired device automatically purges your encrypted vault from the server. To request manual purge of any residual server data, email the address below.

Children

Dash is not directed at children under 13. We do not knowingly collect data from children. The app contains no advertising and no third-party content.

Changes to this policy

If this policy changes materially, we will update the “Last updated” date at the top of this page and note the change in the app’s What’s New screen.

Contact

Questions about this policy: efesop@gmail.com
Source code: github.com/Efesop/rich-text-editor