Last updated: September 10, 2026
OffMemory ("we", "the App") is built on a single principle: your notes are none of our business. This Privacy Policy explains, in plain language, exactly what the App does and does not do with your information.
1. The Short Version
- The App has no network capability at all. It does not request, hold or use any networking permission.
- We never collect, transmit, store, share or sell any of your personal data, notes, images, passwords or device identifiers.
- We have no account system, no email, no phone number, no registration, no analytics, no crash reporting and no advertising SDK.
- Everything you write is encrypted with AES-256 and stored only on your own device.
- The only exception to "no network" is Apple's in-app purchase channel, which is required to process the one-time unlock. Apple handles that transaction entirely; we receive no personal data from it.
2. Information We Collect
None. The App does not collect any information whatsoever — not personal information, not usage data, not device data, not diagnostics. Because the App has no networking capability, even if we wanted to collect such data, the App is technically unable to send it anywhere.
3. How Your Data Is Stored
- Location: All notes, folders, tags and images are stored in a local database inside the App's private sandbox on your device.
- Encryption: Note titles, note bodies and images are encrypted using the AES-256-CBC algorithm before they are written to disk. Your master encryption key is derived from your password using PBKDF2-HMAC-SHA256 and is stored in the system Keychain.
- Backups: We do not back up your data. If you use the App's export feature, the encrypted backup file you create is stored wherever you choose (Files app, iCloud Drive, etc.) and remains fully encrypted with your password. We have no access to it and cannot open it.
- Automatic device backups: Any backup made by your operating system (for example, an iTunes or iCloud device backup) is created and controlled entirely by Apple. Please note that such a backup may contain the App's encrypted database files. Those files remain encrypted, and your password is never included.
4. Passwords and Recovery — Please Read Carefully
Your password is never transmitted, never stored on any server, and cannot be recovered by us. We do not operate any server that could hold it. This is a deliberate design decision, and it is the reason true privacy is possible.
- If you forget your password, we cannot reset it for you, and we cannot recover your notes.
- The App offers security questions as a recovery mechanism. If you configure them, an additional encrypted copy of your master key is created locally. Answering your security questions correctly lets you set a new password while keeping your data.
- If you forget both your password and your security answers, the only remaining option is to erase all local data and start over. This erasure is permanent and irreversible.
5. Biometric Unlock (Face ID / Touch ID)
If you enable biometric unlock, the App asks iOS to store a credential in the device Keychain that can be released after a successful Face ID or Touch ID match. Biometric authentication is performed entirely on your device by the operating system. We never receive your face or fingerprint data, and no biometric information ever leaves your device.
6. Photos and Files
The App requests access to your photo library only in two situations, and only after you explicitly grant permission:
- Inserting an image: the selected image is encrypted and copied into the App's private storage.
- Exporting a backup: the encrypted backup file is written to the location you choose.
You may deny or revoke these permissions at any time in iOS Settings. Denying them does not affect any other feature.
7. Purchases
OffMemory offers a single one-time purchase that permanently unlocks unlimited notes. There is no subscription, no auto-renewal, no trial period and no advertising. All payment processing is handled by Apple through the App Store. We do not receive your name, email address, payment card number or any other personal information from Apple in connection with your purchase.
8. Third-Party Services and SDKs
The App contains no third-party analytics, advertising, crash-reporting, social or attribution SDKs. The only third-party component with any network capability at all is Apple's StoreKit framework, which exists solely to process the one-time purchase described above.
9. Children's Privacy
The App is not directed to children under the age of 13 and does not knowingly collect any information from anyone. Because the App collects no data at all, no information from any user — including children — is ever obtained, stored or shared.
10. Data Retention and Deletion
Because we hold no data, there is nothing for us to retain or delete. You are in complete control of your local data at all times:
- Deleting a note moves it to the in-app Trash, where it is permanently deleted automatically after the retention period stated in the App.
- Using "Erase All Data" in Settings permanently destroys all local notes, folders, tags, images and encryption keys.
- Uninstalling the App removes all of its local data from your device.
These actions are irreversible.
11. Security
We protect your data with the following measures, all of which run locally on your device: AES-256-CBC encryption of note content and images; PBKDF2-HMAC-SHA256 key derivation; storage of keys in the iOS Keychain; mandatory password unlock with brute-force protection (progressive lockout after repeated failures); optional Face ID / Touch ID; automatic re-lock when the App enters the background; and an optional screenshot-blocking mode on note detail pages. No method of electronic storage is perfectly secure, and we cannot guarantee absolute security — but because your data never leaves your device, remote compromise of it is not possible.
12. Changes to This Policy
If we update this Privacy Policy, the revised version will be included in the next release of the App, and the "Last updated" date above will change. Continued use of the App after an update constitutes acceptance of the revised policy.
13. Contact
If you have questions about this Privacy Policy, please reach us through the support information listed on this App's App Store page.
Remember: your password and your security answers exist only in your own memory. Guard them carefully. Losing them means losing your data permanently — there is no exception.
最近更新:2026 年 9 月 10 日
密匣笔记(以下简称"本应用")建立在一个唯一的原则之上:你的笔记与我们无关。 本隐私政策以通俗语言说明本应用对你的信息做了什么、以及绝不做什么。
一、简短版
- 本应用完全不具备联网能力,未申请、未持有、未使用任何网络权限。
- 我们绝不收集、传输、存储、共享或出售你的任何个人数据、笔记、图片、密码或设备标识。
- 本应用没有账号体系:无需邮箱、无需手机号、无需注册,没有任何统计分析、崩溃上报或广告 SDK。
- 你写下的所有内容均以 AES-256 加密后,仅保存在你自己的设备上。
- "零联网"的唯一例外是 Apple 应用内购买通道,仅用于处理一次性买断。该交易完全由 Apple 处理,我们不会从中获取任何个人信息。
二、我们收集的信息
不收集任何信息。 本应用不收集任何形式的信息,包括个人信息、使用行为、设备信息、诊断数据等。由于本应用不具备联网能力,即便我们想要收集,技术上也无法将这些数据发送到任何地方。
三、你的数据如何存储
- 位置: 全部笔记、文件夹、标签与图片均保存在本应用在设备上的私有沙盒数据库中。
- 加密: 笔记标题、正文与图片在写入磁盘前均使用 AES-256-CBC 算法加密。主加密密钥由你的密码经 PBKDF2-HMAC-SHA256 派生,并存放于系统钥匙串(Keychain)中。
- 备份: 我们不提供也不执行任何云端备份。若你使用本应用的导出功能,生成的加密备份文件由你自行选择保存位置(如"文件"App、iCloud 云盘等),且该文件始终以你的密码加密,我们无法访问,也无法打开。
- 系统级设备备份: 由操作系统发起的整机备份(例如 iTunes 或 iCloud 设备备份)完全由 Apple 创建与控制。请注意,此类备份可能包含本应用的加密数据库文件;这些文件始终保持加密状态,且其中绝不包含你的密码。
四、密码与找回 —— 请务必仔细阅读
你的密码从不被传输、从不被存放在任何服务器上,我们也无法帮你找回。 我们不运营任何可能持有密码的服务器。这是经过深思熟虑的设计抉择,也正是真正隐私得以成立的原因。
- 如果你忘记密码,我们无法为你重置,也无法帮你恢复笔记。
- 本应用提供密保问题作为找回机制。设置密保后,系统会在本地额外生成一份由密保答案加密的主密钥副本。正确回答密保问题即可在保留全部数据的前提下设置新密码。
- 若密码与密保答案双双遗忘,唯一剩下的选择是清空全部本地数据并重新开始。该清空操作永久且不可逆。
五、生物识别解锁(面容 ID / 触控 ID)
若你开启生物识别解锁,本应用会请求 iOS 在设备钥匙串中存放一枚凭证,该凭证仅在面容 ID 或触控 ID 验证通过后释放。生物识别验证完全由操作系统在你的设备上完成。我们不会收到你的人脸或指纹数据,任何生物特征信息都不会离开你的设备。
六、相册与文件
本应用仅在以下两种情形下申请相册权限,且必须获得你的明确授权:
- 插入图片: 所选图片经加密后复制到本应用的私有存储空间。
- 导出备份: 将加密备份文件写入你选择的位置。
你可以随时在 iOS 设置中拒绝或撤销这些权限,拒绝不会影响其他任何功能。
七、购买
密匣笔记 仅提供一次性买断,永久解锁无限笔记数量。不存在订阅、自动续期、试用,也不含任何广告。所有支付均由 Apple 通过 App Store 处理。对于你的购买行为,我们不会从 Apple 处获得你的姓名、邮箱、银行卡号或任何其他个人信息。
八、第三方服务与 SDK
本应用不含任何第三方统计分析、广告、崩溃上报、社交或归因 SDK。唯一具备联网能力可能性的第三方组件是 Apple 的 StoreKit 框架,其存在目的仅为处理上文所述的一次性购买。
九、儿童隐私
本应用并非面向 13 岁以下儿童,也不会有意收集任何人的任何信息。由于本应用完全不收集数据,因此不存在获取、存储或共享任何用户信息(包括儿童信息)的可能。
十、数据保留与删除
由于我们不持有任何数据,因此不存在需要我们保留或删除的内容。你始终完全掌控自己的本地数据:
- 删除笔记会先移入应用内回收站,并在应用内标注的保留期限届满后自动彻底删除。
- 在设置中使用"清空全部数据"将永久销毁本地全部笔记、文件夹、标签、图片与加密密钥。
- 卸载本应用将移除其在本设备上的全部数据。
上述操作均不可撤销。
十一、安全措施
我们通过以下全部在设备本地执行的措施保护你的数据:笔记内容与图片的 AES-256-CBC 加密;PBKDF2-HMAC-SHA256 密钥派生;密钥存放于 iOS 钥匙串;强制密码解锁并具备暴力破解防护(连续失败后逐步延长锁定时间);可选的面容 ID / 触控 ID;应用进入后台自动重新锁定;以及笔记详情页可选的防截屏模式。任何电子存储方式都无法做到绝对安全,我们也无法作出绝对安全的保证 —— 但由于你的数据从不离开设备,远程窃取在技术上并不成立。
十二、本政策的变更
若我们更新本隐私政策,修订后的版本将随下一次应用发布一同提供,并更新上方的"最近更新"日期。更新后继续使用本应用,即视为接受修订后的政策。
十三、联系方式
如对本隐私政策有任何疑问,可通过本应用在 App Store 页面上列出的支持信息与我们联系。
请牢记:你的密码与密保答案只存在于你自己的记忆中。务必妥善保管。一旦遗失,数据将永久丢失 —— 没有任何例外。