Privacy Policy
1. The short version
Textree is a local-first note app. Your notes are plain Markdown files on your own device, and they never leave it — except the specific note you choose to publish to the web. We cannot read your notes. The only data the app sends us is a small, strictly content-free set of diagnostics used to fix crashes and first-run failures, described below.
2. What we never collect
The following can never be sent to us — under any setting, in any build. This is enforced by the design of the software, not just by policy:
- The content of your notes
- File names, note titles, or folder and vault paths
- Search queries
- Any personal identifier, account, or device fingerprint
3. What official builds do collect (diagnostics)
Official signed builds of the desktop app send a small set of content-freediagnostic events so we can find and fix problems that would otherwise be invisible to us — chiefly crashes and the app failing to start correctly. Only these fields are ever transmitted:
- App launch — that the app started, plus the app version, operating system, and CPU architecture.
- Errors — an error type or code (for example, a vault could not be created), the numeric OS error code, and the app version and operating system. No file path or error message text is sent.
- Crashes — the location in our own source code where a crash occurred (a file-and-line reference to Textree's code, not to your files), plus app version and OS. The crash message itself is never sent, because it could contain your data.
4. Why it's required — and why that's safe
Because Textree's official builds are provided under ourTerms of Service, these content-free error and app-launch diagnostics are collected as a condition of using the official build; there is no in-app toggle to turn them off. Your safeguard is that they are, by construction, incapable of carrying your content, names, paths, or queries (see Section 2). And because Textree is open source (GPL-3.0), you can build or run a version with no diagnostics at all. We do not collect behavioral or usage analytics, and we never sell or share diagnostic data.
5. When nothing is sent
- When you are offline, diagnostics are skipped, not queued.
- Builds you compile from source, and unofficial forks, send nothing.
6. Where diagnostics go and how long we keep them
Diagnostic events are processed by Microsoft Azure Application Insights on our behalf, in the Korea Central region, and retained for approximately 90 days before deletion. Ingestion is capped daily. The app also writes a local log of what it sends, so you can see the outgoing diagnostics for yourself.
7. The website
The textree.me website uses Google Analytics to understand aggregate visits. This is separate from the app and applies only to your web browser, not to your notes. If you join the cloud hosting waitlist, we store the email address you submit solely to send you an invite.
8. Publishing
If you use the web-publish feature, the note you publish — and only that note — is intentionally made public by you. Treat anything you publish as public.
9. Your rights and contact
You can reach us with any privacy question or request athello@iyulab.com. This policy is governed by the laws of the Republic of Korea.
10. Changes
We may update this policy. For material changes we will give reasonable advance notice through the Service or this page.