- Notes, typed versions, review sheets and study guides
- On HNote's server, and in a working copy on each of your devices. They're encrypted before they reach cloud storage (Cloudflare R2), with a key for each person and file, so Cloudflare sees only scrambled files. Each account has 10 GB.
- Your password
- Never stored. The server keeps only a salted Argon2id hash. Passwords must be 12 to 128 characters and hard to guess.
- Your Canvas sign-in
- In your device's Keychain and, encrypted, with your HNote account, so your next device doesn't have to sign in again. It never goes to cloud storage. The app talks to Canvas itself; the server never does.
- Canvas course files
- Never on HNote's server. They're downloaded only if you turn on Canvas backup, and then only into your own iCloud Drive folder.
- Your Anthropic API key
- In your device's Keychain.
- What you type up or ask
- If you add a key, typing up, review sheets and Ask HNote send what they need to Anthropic under your key. Without a key, nothing goes there.
- This website
- No sign-in, cookies, scripts or analytics. It can't show or reach your notes.
Backups are your choice
Settings has two switches, both off to begin with. iCloud copies your notes to a folder you choose in iCloud Drive and works from it. Canvas backup needs iCloud on, and downloads your course files there over Wi-Fi. With iCloud off, HNote doesn't touch iCloud Drive at all.
You can leave
Delete Account in Settings removes your account right away, and your stored files follow shortly after. A note you delete on its own is kept on the server for 30 days before it's really gone.
What it doesn't do
This isn't end-to-end encryption: HNote's server holds the keys, because it has to send your notes back to you. There's also no two-factor sign-in, and no email recovery, since HNote doesn't ask for your email. Keep your password somewhere safe.