Rune
Still fully offline: no network, no telemetry, no accounts. Not yet audited.
their data. Your notes never leave your device, they are encrypted at rest, and
the app makes no network connections at all. There is no account, no cloud, and
no sign-up.
Privacy by construction, not by promise:
* No telemetry, no analytics, no crash reporting, no advertising, no tracking —
none, not "anonymised", not "aggregated".
* No networking code. Put your device in airplane mode and everything still
works. If anything ever tries to reach the network, that is a bug.
* No account and no server. There is no "we" that could hold your data.
Real encryption:
* Your passphrase derives a key with Argon2id; notes are sealed with
XChaCha20-Poly1305 authenticated encryption. Only ciphertext is ever written
to disk.
* The passphrase is never stored and is not recoverable. If you forget it, your
notes are gone — no reset, no backdoor. That is the price of real privacy.
* A wrong passphrase simply cannot decrypt your notes.
What you can do:
* Create, edit, search, and organise plain-text notes with an Apple-Notes-style
layout that adapts from phone to desktop.
* Auto-lock on inactivity and lock-on-background; the app starts locked.
* Export an encrypted backup (safe to keep anywhere); plaintext export is gated
behind an explicit warning.
* Capture voice notes — recording stays entirely on your device.
Free and open source under the GNU GPL, version 3 or later. The security-critical code is a small,
dependency-light, pure-Dart core so it can be read and audited. Releases published on
GitHub ship with cryptographic provenance (SLSA build-provenance attestations
and a keyless cosign signature) so you can verify those binaries were built from
this source. Builds distributed by F-Droid are built and signed by F-Droid
itself and are not covered by that provenance.
This is honest software: it tells you what it does not yet do. See the project's
SECURITY.md for the threat model and current limitations.
- Author: Rory Standley
- License: GNU General Public License v3.0 or later
- Issue Tracker
- Source Code
- Changelog
- Build Metadata
- Reproducibility Status
Donate
Versions
Although APK downloads are available below to give you the choice, you should be aware that by installing that way you will not receive update notifications and it's a less secure way to download. We recommend that you install the F-Droid client and use that.
Download F-Droid-
x86_64This version requires Android 7.0 or newer.
It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.
Download APK 53 MiB PGP Signature | Build Log
-
arm64-v8aThis version requires Android 7.0 or newer.
It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.
Download APK 51 MiB PGP Signature | Build Log
-
armeabi-v7aThis version requires Android 7.0 or newer.
It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.
Download APK 50 MiB PGP Signature | Build Log