Privacy policy
Effective: October 3, 2026 · Version: 1.1 (pending legal review)
Textablo is a notes app that runs on your computer. Your notes, images and tasks stay on your computer. There is no Textablo server, no account and no user database, and we cannot see what you write. This policy explains exactly what the app stores, what it sends off your computer and when, and how to delete everything.
1. Who is responsible
Textablo is developed by Mihajlo Momčilović, Serbia. Privacy contact: mihajlomomcilovic963@gmail.com.
2. What Textablo stores on your computer
Everything below is stored locally only, in %APPDATA%\T-Text. If you chose a sync folder in Settings, your notes are stored in that folder instead. We have no access to any of it.
| Data | Where | Kept for |
|---|---|---|
| Notes, boards, tasks, tags, folders, reminders, templates | data.json |
until you delete them; "Recently deleted" is purged after 30 days |
| Images and screenshots | images folder |
while used in a note; unused images are removed automatically |
| Text read from images (for search) | ocr.json |
while the image exists |
| Note version history | history folder |
the last 40 versions per note; when you delete a note for good, its history is deleted too |
| Automatic snapshots (loss protection) | snapshots folder |
the last 48 (about 24 hours of work); snapshots before an update: the last 3; before an import: at most 5, none older than 30 days |
| Daily backup | bekap folder |
the last 5 days |
| Settings (appearance, window, choices) | settings.json |
until you remove the app |
| The key of your locked notes | on this computer in settings.json, protected by your PIN and by a secret Windows keeps for your account (DPAPI); in vault.json (next to your notes, also in backups) protected by your recovery key only. The PIN itself is stored nowhere |
vault.json until you delete it; on this computer until you remove the PIN |
| The secret address of a Google / Outlook / iCloud calendar (if you connect one) | settings.json, encrypted with Windows data protection (DPAPI) |
until you remove the calendar |
| A copy of that calendar's events (title, time, place), so the calendar shows without internet | kalendar.json |
until you remove the calendar; refreshed every 30 min |
| Notes pinned to the desktop (which ones, where on the screen) | settings.json |
until you unpin them |
| Error log (technical, no note text) | logs folder |
about 2 MB at most; older entries are discarded |
| Your bug reports (text and attached pictures) | reports folder |
until you delete them |
| Exported notes (PDF, Word, Markdown…) | wherever you choose when saving | your files |
Locked notes are encrypted (AES-256-GCM): the text and boards of locked notes in data.json, in version history, in automatic snapshots and in backups can only be read with your PIN (on this computer) or your recovery key (on any). You see that key only once, when you make the PIN; on another computer or after restoring a backup you open the notes with it. If you lose both the PIN and the recovery key, nobody can bring those notes back, not even us. Not encrypted: the titles and tags of locked notes (so you can find them in the list), the images in them (images folder), text read from those images (ocr.json), and your other notes. Copies made before you locked a note that Textablo doesn't keep (e.g. OneDrive version history, files you exported earlier) stay as they were. For full-disk protection, use BitLocker.
Clipboard history (on by default, Settings → General): while Textablo runs, it keeps what you copy in any app (text, links, images) so you can bring an older item back. It is kept in memory only: never written to disk, never sent anywhere, and gone when Textablo quits or when you turn it off or clear it. Items that password managers mark as private (the same Windows flags its own clipboard history obeys) are skipped. At most 60 items, of them 20 images.
Encrypted backup: in Settings → Backup you can make a backup protected by a password. The whole file is encrypted (AES-256-GCM, key from the password via scrypt) and can't be opened without the password.
3. When Textablo sends something off your computer
Textablo has no analytics, tracking, ads or cookies, and never sells or shares data. It uses the internet only in these cases:
| When | To whom | What is sent | Your control |
|---|---|---|---|
| Checking for new versions (download version only, at start and every 30 min; the Microsoft Store version never does this) | GitHub (Microsoft) | a request for the list of releases; GitHub sees your IP address and the "Textablo" label; nothing from your notes | Settings → Updates → "only when I click Check" |
| You paste a link into a note or onto a board | that website (and the site of its picture) | a request for the page, to show its title; on a board also its description and picture, which is saved in your images folder; the site sees your IP address | don't paste the link, or delete the card |
| You drag an image from a website | that website | the image download | your choice |
| Bug report (only when you click "Send") | the Textablo developer, privately, through Google (the report is stored in the developer's Google Drive; Google sees your IP address) | what you write, pictures you attach yourself and, if left checked, app version, Windows version, screen and recent log errors (no note text) | only what you see in the window is sent; you can choose "Copy report" instead |
| Calendar (only if you connect a Google, Outlook or iCloud calendar yourself) | Google (or Microsoft / Apple) | a request for that calendar, with its secret address, at start and every 30 min; the service sees your IP address; nothing from your notes is sent; Textablo only reads the calendar and changes nothing in it | Kalendar → Google kalendar → Ukloni |
| "Add to Google Calendar" on a reminder (only when you click it) | Google, in your browser | the reminder's text and time, which you then save (or not) in Google Calendar yourself | don't click it |
| Share by link (only when you make a link) | nobody, until you send the link; when the recipient opens it, their browser loads the reading page from GitHub | the note is inside the link itself, after the # sign, which browsers never send to any server; anyone with the link can read the note | don't make a link; you can't take a link back yourself, so share it with care. Anyone can report a shared note with "Report this note" on the reading page; we turn off links that break the law or our terms |
Microsoft Store: if you installed Textablo from the Microsoft Store, Microsoft installs and updates it and may collect diagnostic data about it under Microsoft's privacy statement. We only see the summary reports Microsoft gives every developer (such as download counts and crash counts), never your notes.
Built-in Windows features that Textablo calls, such as voice typing (Win + H) and screen snipping, are covered by Microsoft's privacy statement. Reading text from images (OCR), exporting notes (PDF, Word, Markdown, HTML, text) and importing from other apps (Google Keep, Notion, Evernote, Markdown, Word) run on your computer, offline. Import reads only the files you pick.
Folder sync: if you keep your notes in a OneDrive, Google Drive or Dropbox folder, that service transfers and stores them under its own terms.
4. Legal basis
Your notes never leave your computer, so we do not process them. Data in bug reports is processed on the basis of your consent: you send it yourself, voluntarily, and only so we can fix problems. The Serbian Law on Personal Data Protection (Official Gazette RS No. 87/2018) applies and, for users in the EU, the General Data Protection Regulation (GDPR).
5. Your rights
You have the right to access, rectify, erase, restrict and port your data, and to withdraw consent.
- Your notes are in your hands. You export (Settings → Backup), delete and move them yourself, without us.
- Bug reports: a copy of every report stays with you ("My reports"). To see, correct or delete a report you sent, write to mihajlomomcilovic963@gmail.com; we reply within 30 days. Reports an older version sent to GitHub you can edit or close yourself.
- Complaints: you can lodge one with the Serbian Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs), or with the supervisory authority in your EU country.
6. How to delete everything
- In Textablo: Settings → Backup, if you want a copy.
- Uninstall or delete the app folder.
- Delete
%APPDATA%\T-Text(notes, images, settings, log). - Delete your sync folder, if you use one. (Versions up to 1.2.1 kept the daily backup in
Documents\T-Text bekap; if that folder is still there, delete it too.)
7. Children
Textablo collects no data from anyone, including children.
8. Security
The Microsoft Store version is updated by the Store. The download version updates only from our official GitHub release and checks the downloaded file's digital signature before installing it, so it installs only a release we really published. It copies your notes before every update.
9. Changes
If this policy changes, the new version is announced in the app ("What's new") and published here with a new date. If Textablo ever starts sending a new kind of data (for example crash reports), that will be off until you turn it on.