Here is exactly what that means — and what it doesn't.
Yes. Every note's title and body is encrypted with AES-256-GCM before it is written to the database. Notebook and section names, your tags' contents, and any screenshots or images you paste in are encrypted the same way. What sits on disk looks like this:
3JJ9tyu80/9rUeaWO9n/n5ctVi4ZQVdbZILUfI/nTT0NFBV0HIdkcw==GCM is an authenticated mode, which means the data is not only unreadable without the key — it cannot be silently altered either. If a single byte changed, decryption fails loudly rather than returning something subtly wrong.
Backups copy what is in the database, and what is in the database is ciphertext — so the backups are encrypted too. A backup that fell into the wrong hands would be a pile of unreadable blobs.
Backups run nightly to multiple separate locations, held by different providers, so that losing any one of them — an outage, an account problem, a failed disk — cannot take out the rest. We don't publish where they are; that's part of keeping them safe. An automated monitor raises an alert if a backup ever fails to complete.
This is the interesting part. Encrypted text cannot be searched — so most apps that offer real search simply store your notes in plain text. MyNotes365 does neither.
Instead, each word is converted into a keyed one-way code before being stored in the search index. Searching converts your query the same way and matches the codes. The index can be read all day and reveals nothing: there is no way to work backwards from a code to the word it came from.
We don't, and the tools deliberately make it awkward to. The administration page shows account information only — when you signed up, when you last signed in, how many notebooks and pages you have — and cannot display note contents at all.
But here is the honest boundary, because you deserve a straight answer: the server holds the key that decrypts your notes, because the server is what decrypts them to show you. Anyone with full administrative control of the server could therefore reach that key. Encryption protects your notes from a stolen database, a stolen backup, a stolen disk, or a leaked copy — which is how data actually escapes in the real world. It is not a mathematical guarantee against the operator.
Yes, a little, and only if you switch the feature on. It is off by default and nothing described here happens until you turn it on.
Finding the right notes happens entirely on our server. Your notes are turned into a mathematical index by a model that runs on the same machine they are stored on, and matching your question against that index never touches the network. If all you want is to search your notes by meaning rather than by keyword, no part of your writing goes anywhere.
Writing the answer is the part that leaves. The question you typed and the handful of passages that matched it — typically five or six short extracts — are sent to Anthropic's API, which composes a reply and sends it back. Your other notes are not sent. Your notebooks, titles and file attachments are not sent. Anthropic does not train models on data submitted through their API.
There is a second, separate setting — “Name and file new notes”. It is also off by default, and it works differently in a way worth being plain about: the other feature only sends anything when you ask a question, whereas this one reads notes on its own. If you turn it on, a note that has no title, or no tags, is sent to Anthropic once so it can be given them.
It only ever fills a gap. A note you titled keeps your title; a note you tagged keeps your tags; a note that has both is never sent at all. Each note is considered once, not repeatedly, and it waits five minutes after your last edit so nothing is renamed while you are still writing. Switching it off stops it immediately.
If you switch on notifications for a device, reminders can arrive there as Android notifications. Getting one to your phone means going through Google's push service, because that is the only route to an Android device — but the reminder is encrypted for your device before it leaves our server, using a key your browser generated and Google never has. Google relays it without being able to read it.
It is off until you turn it on, and it is per device: switching it on on your phone does not switch it on anywhere else. Turning it off removes that device immediately.
It goes to the trash, where you can restore it. Deleting it from the trash is permanent and also removes its version history and any images it contained — nothing is quietly left behind.
Yes. MyNotes365 keeps a history of each page as you edit it, and you can preview any earlier version and restore it. Restoring is itself recorded, so you can undo the undo.
On a private server in the United States, run by ComputerHelpSOS LLC. Your notes are not sold, mined, shared with advertisers, or used to train anything.
Email andy@computerhelpsos.com and a human will answer.