Last updated: July 5, 2026
Jotora is a local-first notes app. This policy explains what data Jotora handles, where it lives, and who — if anyone — it's shared with.
Jotora does not collect, transmit, or share any of your personal data. There is no account or sign-in. Your notes, images, voice recordings, folders, and tags are stored only on your device, in a database encrypted at rest. Jotora has no servers of its own and does not send your content anywhere.
Everything you create in Jotora — note text, titles, folders, tags, checklists, image attachments, and voice recordings — is stored locally on your device only, inside the app's private storage. It is never uploaded to us or to any third party, because Jotora doesn't have a server to upload it to.
The note database itself is encrypted at rest using a 256-bit key that is generated on your device and stored in your device's secure hardware-backed keystore. Attachment files (images and voice recordings) are stored as regular files in the app's private storage folder and are not separately encrypted — only the database containing your notes, folders, and tags is.
If you enable the optional app lock, your PIN is never stored in plain text — only a salted cryptographic hash of it is kept, in your device's secure storage. Biometric unlock (fingerprint or face) is handled entirely by your device's own operating system: Jotora asks the OS "did this succeed?" and only ever receives a yes/no answer. Jotora never receives, stores, or has access to your actual fingerprint or face data.
Jotora lets you export your notes, folders, tags, and attachments to a single file on your device, which you can then share anywhere you choose — for example to your own cloud storage, email, or messaging app — using your device's normal share screen. Jotora does not automatically upload this file anywhere; it only exists where you choose to send it. Note that, like the attachment files described above, this export file is not encrypted, so treat it with the same care you'd give any file containing your personal notes and photos.
Jotora does not request access to your contacts, location, camera (beyond picking an existing photo), or any other device data.
Jotora does not currently display advertising and does not use any analytics or tracking software. If this changes in a future version, this policy will be updated first, and the change will also be reflected in the app's Data Safety disclosure on Google Play.
Jotora does not share, sell, or transmit your data to any third party, because it does not transmit your data anywhere at all. All processing happens on your device.
Jotora is a general-purpose note-taking app and is not directed at children. It does not knowingly collect any information from anyone, of any age, since it does not collect information at all.
If Jotora's data handling ever changes — for example, if a future version adds an optional cloud sync or advertising — this page will be updated, and the "Last updated" date above will change accordingly.
Questions about this policy or how Jotora handles data can be sent to jotoranotes@gmail.com.