Privacy Policy — Dripnex

Overview

Dripnex stores your notes on your device. An account is required to use the app.

Cloud sync is optional. When it is on, the server stores only ciphertext we cannot read.

Unless you enable sync, Dripnex does not upload:

Sign-in uses a magic link to the email you provide. We store that email and session tokens to keep you signed in and check your license.

When you subscribe, Stripe collects payment details:

Stripe handles card data under their privacy policy. We do not see full card numbers.

If you set an encryption passphrase, the desktop encrypts notes before they leave the device.

api.dripnex.app stores encrypted blobs, device metadata, and sync versions. It does not have the key to decrypt note content.

If you never set a passphrase, sync stays off and nothing from your notes is uploaded.

AI features run from the desktop against the provider you configure (Ollama locally, or an API key you paste).

Dripnex does not proxy those prompts through our servers. Whatever that provider logs is between you and them.

The app may check for updates. Those checks do not include note content.

If a Sentry DSN is configured in a build, crash reports may include stack traces and environment data — not note bodies.

We do not sell data or run advertising SDKs. Services that may see something:

Your notes live on your computer (and as ciphertext on our sync store if you enabled it).

You can export Markdown at any time.

To delete your account or payment records, email privacy@dripnex.app.

We may update this privacy policy occasionally.

Significant changes will be announced through our changelog and blog.

Continued use of Dripnex after changes constitutes acceptance of the updated policy.

For privacy-related questions or concerns: