Privacy

What we never collect

• The content of your notes. Text, ink, PDFs, images, audio, and the names you give them stay on your device. None of it is sent to us in any form.
• Accounts or payment details. The app has no sign-in and takes no payment, so there is no name, email address, or card on file to collect.
• Advertising data. No ads, no ad networks, no advertising identifiers, and no tracking of you across other apps or websites. We do not sell, rent, or trade data to anyone.

Your notes

Notes are files on your device. There is no server of ours that holds them, and no account that they belong to. Two features move note data off your device, and you turn on both yourself.

• GitHub sync. The app writes your notes to a GitHub repository you choose, using a token you authorize. The token is kept on your device in an encrypted vault; we never receive it. Your notes travel between your device and GitHub without passing through us, and GitHub's handling of what lands there is covered by GitHub's own privacy statement.
• Live collaboration. Described under Live collaboration below. Note content moves directly between the devices in the session, encrypted end to end.

This website

trymyelin.app uses PostHog to count page views and to record JavaScript errors, so we can tell whether the site works and which pages people read.

• No cookies, and no storage on your device. PostHog is configured to keep its state in memory only, so the site writes no cookie, no localStorage entry, and no sessionStorage entry. The identifier attached to your visit lasts as long as the page is open and is gone when you close the tab. There is no consent banner because there is nothing stored to consent to.
• What is recorded. The page you opened and when you left it, the page that referred you, your browser, operating system and screen size, and your IP address, from which PostHog derives an approximate location. Autocapture and session recording are both off, so clicks, keystrokes, form input, and screen contents are not recorded.
• Where it goes. PostHog processes this on servers in the United States.

Analytics and error reports in the app

The app can send two kinds of data, both governed by a single switch in Settings, under Privacy. The switch starts off. First-run setup asks you about it, and until you turn it on the app does not contact our analytics provider at all.

• Product events. A fixed list of named actions: opening the app, creating or opening a note, running a command, finishing an import or export, changing a setting, a sync failing. Each carries only categorical detail, such as the kind of note, the export format, or how many files were involved. Note titles and note content are not attached. The one exception is a failed sync, which also carries the first 200 characters of the error message so the failure can be diagnosed, and that text can mention a file path.
• Error reports. The error message, its stack trace, and the part of the app it came from. Before anything is sent, values stored under keys that look like secrets (token, password, secret, authorization, credential, cookie, vault, api key) are replaced with a redaction marker. Messages and stack traces can still mention file paths, so an error report may reveal a folder or file name even though the note itself is never included.

This switch starts on. Turning it off stops product events and error reports at once, and nothing is sent while it is off.

So that repeated events from one installation can be grouped, the app stores a random installation identifier on your device. It is not linked to your name or email address, and there is no account for it to be linked to.

Update checks

The app asks GitHub, where our releases are published, whether a newer version exists. That request shows GitHub your IP address along with the platform and version you are running, the same as any software download. It happens whether or not analytics are on, because it is how security fixes reach you.

Who else handles this data

• PostHog receives the analytics and error reports described above, and processes them in the United States.
• Cloudflare serves this website and the live collaboration discovery service, so it handles the network requests your device makes to them.
• GitHub hosts our releases, so it handles the update check every copy of the app makes. It also receives your notes, but only if you set up GitHub sync.
• The iroh project runs the relay servers that carry live collaboration traffic when a direct connection is not possible. That traffic is encrypted end to end, so the relays pass it along without seeing its contents.

Each of these providers is bound by its own terms and data processing agreement to protect what it handles for us and to use it only to provide that service. None of them are permitted to use it for their own advertising or to pass it on. We share data with no one else.

How long it is kept

• Analytics and error events are retained for 12 months and then deleted.
• Live collaboration records carry an expiry and are dropped automatically when it passes, within minutes of the session ending.
• We keep no server-side request logs of our own for the website or the discovery service beyond what Cloudflare retains to operate and protect them, and update checks are logged by GitHub rather than by us.
• There is nothing else to keep, because there is no account and no copy of your notes.

Your choices

• Stop collection. Open Settings, go to Privacy, and turn off the analytics switch. It takes effect immediately and needs no restart. Withdrawing consent this way is always available and never affects how the app works.
• Ask what we hold. Email admin@trymyelin.app and we will tell you.
• Ask us to delete it. Email the same address. Because there is no account, what we hold is not linked to your name or email address and cannot be found from an email address alone, so we will walk you through locating your installation identifier and then delete every event carrying it.

Children

Myelin Notes is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has sent us data, email us and we will remove it.

Changes to this page

When what we collect changes, this page changes with it, and the date at the top moves. Material changes are called out in the release notes for the version that makes them.

Contact

Questions about anything here go to admin@trymyelin.app.