What Notada sends.

Your notes

Your notes are Markdown files, one per notepad in the Notada folder, in iCloud Drive when iCloud Drive is on and in Documents when it is not, with a folder beside each for the images you paste. In iCloud Drive they reach your other devices by Apple’s own sync, as any file there does; Notada itself sends nothing of them anywhere. Notada reads and writes those and nothing else of yours. It never uploads them, never indexes them anywhere, and never sends a line of them off your Mac, to anyone, including me. No event below carries a word you wrote, the name of a file, or its path.

Suggestions

On a Mac running macOS 26 with Apple Intelligence, Notada can suggest that a line you wrote is a todo, a question, or a decision: a dashed mark beside the line, which you take or leave. The line goes to the model built into macOS, which runs on your Mac and nowhere else; on a Mac without it, nothing happens. Item › Suggest in the menu bar turns each of the three kinds off.

Usage data

The app sends anonymous usage events to PostHog, a product analytics service, so that I can see what people actually do with it and decide what to build next on that rather than on guesses. Each event says what happened, not what was written:

• The app opened, with whether it is in the free trial, past it, or licensed, which day of the trial it is, whether the notepad shown could be read, how many open todos and open questions it holds, how many days you have written across all your notepads and how many notepads you have, whether the list is shown and how wide it is, whether the model built into macOS is there, still downloading, or absent, and whether macOS opened the app from the disk image or Downloads rather than from Applications. Counts, never contents.
• A day was started: today’s date header was written, with whether a keystroke, a paste, Answer, the note the app writes on first launch, or a line from the notada command line did it. Never the date.
• A line became a todo, a question, or a decision, with which of the three and whether a form you typed, the palette, the keyboard, or a suggestion made it one. Never the line.
• The app came to the front for the first time that day, with how many open todos, open questions, days, and notepads your notes hold; the day turned over, at 4 in the morning, while the app was running, with whether its window was open; and the window was opened again after it had been closed.
• Another notepad was shown, with whether a swipe, the keyboard, the menu bar, or the name at the top of the list did it; or a new notepad was made. Never its name.
• An item was closed, dropped, or reopened, with whether it was a todo or a question and whether the list, the mark beside the line, or the keyboard did it, how long it had been waiting in the list’s terms, and whether it had a due date and was past it.
• A row in the list was clicked to show its line, with the same facts.
• You went back to an earlier day in the notes, by scrolling, from the list, or with a search, at most once a day for each, with how many days back.
• A row was taken from the palette, and which one.
• A link in the notes was opened, with whether it was a web address or an image. Never the address.
• An image was added to the notes, with whether it was pasted or dropped in. Never the file.
• Text was pasted as code, and how many lines it had. Never the text.
• The notes were searched, with whether anything matched and how many times Next or Previous was pressed. Never the words searched for.
• Lines written by another program, such as the notada command line, were merged in, and how many.
• A conflicting change was saved to the backup file.
• The list was shown or hidden; its Decisions were opened or closed; and its ages were shown or hidden from the View menu, or shown for a moment by holding ⌥.
• Buy Notada… was clicked; a license key was entered or rejected, from the sheet or from the link on the page a payment returns to; the license sheet was shown or dismissed, and in which of its three states; and the app opened in the last five days of the trial, with whether the list was showing. Each carries which day of the trial it was. Never the key.
• The update window found a newer version, with how many versions behind the app is and whether you asked; you chose Remind Me Later or Skip This Version; an update began to install.
• The notada command line or its MCP server was used, as counts of each command and tool since the app last looked. The command line sends nothing itself: it keeps the counts in a file beside the app’s other files, and the app reads them, sends them, and empties the file. Never what was asked, a line, or a notepad’s name.
• A suggestion was shown, or taken, with whether it was a todo, a question, or a decision and whether the mark or the keyboard took it. Never the line.
• A kind of suggestion was switched on or off.
• Check for Updates Automatically or Share Usage Data was switched on or off.

Every event also carries the app version, the macOS version, the Mac’s model, language, time zone, and screen size, and a random id the app makes on first launch, so that events from one Mac can be counted as one Mac. None of it is your name, your email, your notes, or anything you typed. Events go through a hostname of mine, the same one this site uses, which keeps nothing and passes them on to PostHog’s servers in the United States under my account; PostHog reads your country and region from the IP address it is handed, keeps those two, and discards the address. Not the city, and nothing finer.

Notada › Share Usage Data in the app menu turns it off. The app sends one last event to say so, and then nothing.

Crashes

If Notada crashes, the next time it opens it sends one crash report: what kind of crash it was, where in the code each thread was, which libraries were loaded, and the last few of the events above. Before it is sent, the message that came with the crash is removed, because the system sometimes puts the text it was working on into that message, and any path that names your home folder loses the name. The report goes to the same place as the usage data, and the same switch turns it off.

Updates

Once a day the app fetches a small file from notada.app to see whether there is a new version. The request carries the app’s version, as any download does, and nothing from your notes. Notada › Check for Updates Automatically turns it off.

Buying

The checkout is Stripe’s page on Stripe’s domain. Stripe is the seller of record and holds your payment details; I never see them. The page you return to shows your license key, one line signed with your email and the purchase date. The app verifies it on your Mac and never calls anyone to do so. It keeps the key, the date you first opened the app, the usage-data id and switch, and the command line’s counts of its calls outside your notes, as plain files under Application Support, and nothing else.

This site

This site sets no cookies and loads nothing from anyone else; the fonts and the scripts are served from here. It counts visits with PostHog, the same service the app uses, through a hostname of mine:

• Each page you open.
• A click on a download, buy, or What’s new link, or on Send to your Mac, which a phone or a PC shows in the download’s place.
• A click on the button that copies the assistant setup prompt.
• Once per visit of the front page, that you scrolled down to the pictures of the app.

Each carries the page’s address, the site you came from if the browser says, your country, and the browser and screen size. The country is worked out from your address by the edge server of mine that forwards the events; PostHog uses the address once more to make the day’s hash, then discards it. No cookie is set and nothing is kept in your browser; a visitor is a hash that changes every day, so I can count people and never recognize one. Visits from cloud data centers are not counted at all: those are link scanners and crawlers, not people.

Questions go to hello@notada.app.