The design
Your sessions, notes and history are stored locally on your device. When sync is enabled, content is encrypted on your device before leaving it. We hold ciphertext, not text.
What this means in practice
We cannot show your data to advertisers, train models on it, or comply with a content request — because we do not have the keys. You can delete everything at any time from Settings → Data & Storage.
Trade-offs you should know
If you lose your device and have not enabled sync, your history is gone. If you forget your encryption passphrase, we cannot recover it. Privacy and recoverability are in tension — we lean privacy.