EveryJot Privacy Policy

Last updated: 17 August 2026

EveryJot collects no data.

That is not a polite formula: the app has no account to create, no server to talk to, no analytics, no ads and no tracking of any kind.

Where the notes live

Notes, notebooks and tags stay on the device. If iCloud is enabled, the same data is copied into the user's own private iCloud container, so it can be found on the other devices signed in to the same account. That container is governed by Apple and by the user's account: whoever wrote the app has no access to it, receives no copies and has no technical way to read it.

Protected notes

When a note is protected, its content is encrypted on the device before being saved, using AES-GCM. Each note's key is wrapped by a key derived from the PIN the user chooses: that PIN is never stored and never transmitted, and without it the note stays unreadable even to someone holding the database file or the contents of the iCloud container.

Two things deserve to be said plainly, because you have a right to know them:

• The title of a protected note stays readable, because it is what lets you find the note in a list. The title is the note's first line: if that line holds something private, it is worth changing it.
• If the PIN is forgotten, protected notes cannot be recovered. There is no copy of the key anywhere and whoever wrote the app can do nothing about it. That is the direct consequence of the encryption being real.

Attachments and recordings

Files attached to a note and voice notes recorded inside the app follow exactly the same rules as the text: they stay on the device, they go into the private iCloud container if iCloud is enabled, and if the note is protected they are encrypted like the text, with the same key. A recording is not a separate kind of data.

Recordings are not sent to any transcription service and they never leave the app on their own: they go out only when they are shared. At that moment they go out unencrypted, because otherwise there would be nothing to share. The app says so beforehand, when the attachment comes from a protected note.

Who else sees them

Nobody. The notes are not shared with third parties, because they are not transmitted at all.

Export and sharing

When a note is exported as Markdown, PDF, image or Word, or shared, the destination is the user's choice: the file goes where it is sent and the app keeps no copy. Temporary files created for sharing are deleted.

The permissions requested and why

• Reminders: only when a note is linked to a system reminder, to create it in Apple's Reminders app and read its status back. It can be refused: the rest of the app works.
• Face ID or Touch ID, when a note is protected or the app is locked: the check is done by iOS, the app only receives a yes or a no. No biometric data passes through the app or leaves the device.
• Microphone: only to record a voice note. It is requested the first time the microphone button is tapped, not when the app starts. The recording is written as a file inside the note: it is not listened to, analysed or transmitted to anyone. It can be refused: the rest of the app works.

Why the app can record with the screen locked

EveryJot declares the background audio mode to iOS for one reason only: a long recording continues well past the moment the screen turns off, and without this mode it would stop when the screen locks, which is exactly when it needs to continue. It applies only while a recording started from the app is running: the app never turns the microphone on by itself.

What is shown on the Lock Screen while recording

While a recording is running, EveryJot shows a card in the Dynamic Island and on the Lock Screen, with the timer and a button to stop. Next to the timer it shows the first line of the note being recorded, so it is clear which note it is: that line is therefore visible with the phone locked, like any notification. The content of the note is never shown, and the card disappears as soon as the recording ends. Live Activities can be turned off entirely in the iOS Settings, under EveryJot.

Data not needed

EveryJot does not ask for location, contacts, camera, photos or health data, because it does not need them.

The extensions

The iMessage extension reads notes from the same private iCloud container, to show them when one is being sent: it does not send them anywhere else. The Control Centre control only opens the app.

Deleting everything

Removing the app deletes the data on the device. Anything stored in iCloud can be removed from the device's iCloud settings, under storage management.

User rights

Since nobody who wrote this app collects any data, the data stays under the user's direct control at all times, on their own device and in their own iCloud account: there is nothing to request, correct or delete from a third party, because no third party ever holds a copy.

Children

The app is not directed at children and collects no data from anyone, of any age.

Contact

For any question: everyjot@robertobonfa.dev

Changes

If this policy changes, the date at the top will change with it.