Privacy
Euxie Scribe (“Scribe”) stores what you write: your notebooks, notes, tags, the images and audio memos you add, and the version history it keeps for you. It also keeps your conversations with the notes chat — each question, its answer and the notes it cited — until you delete them, and the times you edited each note (which note, to the quarter-hour, not what changed), which is what the writing streak and activity calendar are drawn from. Each account can see only its own rows and files — that is enforced by the database and the storage policies, not by the application code.
Sealed notebooks
A sealed notebook is encrypted on your device with a passphrase the server never sees. Its names, titles, bodies and files reach our servers only as ciphertext, and no feature of ours — search, AI, telemetry — can read them. That also means a forgotten passphrase cannot be recovered.
Opened sealed-note bodies are cached as encrypted updates in this browser’s IndexedDB. Unlocking decrypts them in memory; locking drops the key and closes the decrypted documents. Ordinary notes remain readable in the local cache. Encryption protects stored sealed content, not an unlocked browser or a compromised device. A downloaded readable export contains decrypted notes.
So that Scribe opens without a connection, this browser also keeps your note list (titles of ordinary notes; sealed titles and the sealed-notes key only in encrypted or wrapped form) and the bodies of your pinned and most recently edited ordinary notes, plus any note you have opened here. Offline you can read and edit those bodies; the edits are pushed when you reconnect. Signing out deletes this browser’s copy, after warning you about any edits that have not reached the server yet.
What goes to Google
The AI features run on Google's Gemini API. Autocomplete sends text while you type, before you accept a suggestion. Background indexing sends unsealed note text to Google to make notes searchable in Ask and related notes, including captures and imports. You can pause either feature in Settings. When you rewrite a selection, ask the notes chat a question, request tag suggestions or transcribe an audio memo, the relevant text or audio — and, for chat and autocomplete, excerpts of your unsealed notes — is sent to Google to generate the response. Google's API terms govern that processing. Sealed notes are never sent.
Usage telemetry
Separately from the data above, and to understand how Scribe is used, it also records what you do here as telemetry. This is a second copy, keyed to your browser and, while you are signed in, linked to your account as well, and for unsealed notes it includes the content. For a sealed note it records only that a note with that id was created, edited or exported and when — never its title, body or files. Specifically:
What we store
- Your activity — which actions you take and when.
- The content you process — the titles and text of the unsealed notes you create and edit, your searches, the rewrites and tag suggestions you accept, your questions to the notes chat and its answers, and the transcripts of your audio memos. Do not enter anything here you would not want stored, including passwords, secrets or personal documents.
- Files you upload — the images you add to unsealed notes and the audio memos you record are stored in our private file storage.
- Your network and device — your IP address, an approximate location derived from it, your browser and operating system, language, time zone, screen and window size, and similar technical details your browser exposes.
- A device identifier — a random id kept in your browser’s storage so we can recognise return visits. It is also stored in a cookie so our servers can recognise the device. It is not tied to your name and clearing your browser storage resets it.
- Page views via Vercel Web Analytics — the hosting platform records which pages are visited, referrers, and coarse device and country data. It sets no cookies and identifies a visitor only by a hash that changes daily, so it cannot follow you across days or sites.
- Performance via Vercel Speed Insights — the hosting platform measures how quickly pages load and respond (Core Web Vitals), with the page, device type and country. It sets no cookies and does not identify you.
- Your account — while you are signed in, telemetry recorded from this browser is also linked to your account (its id and email address), so we can see what one account did across devices. Deleting your account unlinks that telemetry but does not delete it: the records stay under the device identifier, without your account or email. To have them removed as well, ask separately (below).
- Support access — to diagnose a problem, the operator can sign in to your account and see the app as you see it, without learning or changing your password. Each access is time-limited and logged, and does not sign you out anywhere else. Nothing done during it is recorded as your telemetry.
- Feedback you send — your bug reports, feature requests and replies are stored linked to your account, so the maintainer can answer them on your Requests page, and each new report is also emailed to the maintainer. Deleting your account unlinks them but does not delete them.
- Never a sealed note's content — a sealed note contributes its id and the fact that it changed, nothing else, and never a passphrase.
How long we keep it
Stored data is retained indefinitely unless you ask us to remove it.
Requesting deletion
To have your data deleted, use the feedback button in the app (the message reaches James Argarin) and mention your device identifier if you have it. We will remove the associated records.
Notes saved from other Euxie apps
Some Euxie apps (Signal and Blog so far) offer a Save to Scribe button. Pressing it there sends that item here, signed in as you, and it arrives as a new note in your capture notebook (your Inbox unless you chose another), tagged with the app it came from and linking back to the original. Nothing arrives unless you press the button. From then on it is an ordinary note: it is indexed for AI search straight away like any note you write, using the same daily allowance, and it stays until you delete it here. Deleting your account in the other app does not remove it.
Your agreement and email choice
When you create an account, Scribe records which version of the terms of use you agreed to and when, and whether you asked for product news and offers by email. That box starts unticked; you can change your answer under Account at any time. Deleting your account turns promotional email off; the record of what you agreed to is kept with your sign-in.
Bot check on sign-in
The sign-in, sign-up, password-reset and account forms run Cloudflare Turnstile, a check that the visitor is a person and not a script. It runs in a frame served by Cloudflare, which reads your network address and technical details of your browser to decide, and tells this site only whether the check passed. Cloudflare states that it uses those signals to detect and block bots, not to identify or profile anyone; its Turnstile privacy policy describes them.
Deleting your account
Account → Delete account removes every row and every file belonging to you, sealed notebooks included, immediately and irreversibly — export any notes you want to keep first. The exception is the log of AI calls and the daily allowance counts (token counts and timings, never what was asked), which stay with your hive sign-in so deleting your data does not reset the daily allowance. Usage telemetry is unlinked from your account but not deleted — see above for how to have it removed.