$ cat privacy-policy.md
Privacy Policy
The short version: oHar doesn't collect your data. Your notes are plain Markdown files in your own iCloud Drive, and the few things that sync between your devices do so through your own private iCloud account. oHar has no servers of its own, so there is nothing for us to collect, store, or share.
What oHar stores, and where
- Your notes are plain
.mdfiles in an oHar folder inside your own iCloud Drive. They're the same files you see in Finder and the Files app. - Tags, starred status, and a few app settings sync through CloudKit, in your own private iCloud database.
- Attachments (images and files you insert into a note) are stored in an
attachments/folder next to that note, in the same iCloud Drive folder. - The search index is built on your device from your notes, and kept there. It is never synced or sent anywhere.
- Preferences that only affect this device, such as which screen opens on launch, are stored locally with the operating system's standard preferences mechanism.
What oHar does not do
- No account creation, sign-up, or login beyond your existing Apple ID and iCloud account.
- No analytics, tracking, advertising, or usage telemetry of any kind.
- No third-party SDKs, crash reporting services, or advertising networks.
- No networking code of its own. The only network traffic is Apple's iCloud and CloudKit services, which sync your own data.
- No logging of note content anywhere.
- No sending of your voice recordings anywhere. Voice notes are transcribed on your device, and the audio is never sent to Apple or anyone else.
Voice notes and the widget
Voice notes use the speech recognition built into your device, configured to run on-device only. The audio is never sent to Apple or to anyone else. The Home Screen widget shows no note content and makes no network requests: tapping it opens oHar directly on a new note.
Spotlight and system search
By default, oHar adds your note titles, tags, folder paths, and text to your device's own Spotlight index, so you can find notes from the system search. You can turn this off in Settings, and oHar removes what it has added when you do. Spotlight is part of your device; this data never leaves it through oHar.
Apple system services on macOS
On Mac, on-device speech recognition relies on one Apple system service, which the app reaches through a temporary sandbox exception required for that feature. Nothing else on macOS is reached this way.
Your data, your control
- Delete any note, folder, tag, or attachment directly in the app. A deleted note can be undone for a few seconds.
- Because your notes are plain files, you can also copy, move, or back them up from Finder or the Files app at any time.
- To remove oHar's data entirely, delete the app and remove its iCloud Drive folder and any CloudKit data from iCloud settings on your device.
- There's no account with oHar to delete, because none exists. Your Apple ID is the only account involved.
Changes to this policy
If this policy changes, the date above will change and the updated version will be posted at this same address.
Contact
Questions about this policy, or about how oHar handles your data, can be sent to privacy@ohar.dev.