Nothing. Your notes are files on your own disk, Inkju has no servers, and there is no account to make. Most of this page exists to say that precisely enough to be checkable.
The short version
- Inkju collects no personal data. There is nowhere for it to go: no backend, no database, no account system.
- Your notes are ordinary markdown files in a folder you chose. Inkju reads and writes them and nothing else.
- There is no analytics, no telemetry and no crash reporting, in the app or on this site.
- The app makes exactly one network request on its own: checking inkju.md for a new version, which you can switch off. A connected account, or an AI you ask a question, talks to that provider — never to us.
- If you connect a cloud account, your files move between your computer and that service directly. They do not pass through us.
This website
inkju.md is a static site hosted by Vercel. Like any web host, Vercel records requests — your IP address, the page requested, your browser's user-agent string and the time — for delivery, security and abuse prevention. We do not add anything to that, and we do not read it.
There are no cookies, no analytics and no tracking scripts of any kind. Nothing on this site follows you anywhere.
One exception, worth naming. The site loads its typefaces from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). That means your browser contacts Google to fetch them, and Google therefore sees your IP address and user-agent. No cookie is set and nothing about you is sent by us, but the request happens and you should know about it. We intend to serve the fonts from this domain instead, which removes the third party entirely.
Trying Inkju in your browser
The browser build runs entirely on your machine. The document you type is kept in your browser's localStorage so a refresh does not lose it. It is never uploaded, and clearing your browser data removes it.
The desktop app
What stays on your computer
| What | Where |
|---|---|
| Your notes | The vault folder you chose. Plain markdown, yours, readable without Inkju. |
| Preferences and open tabs | settings.json in the application-support folder for your account. |
| Version history | An .inkju/history folder beside the vault. |
| Your license, once you buy | licence.json in the same folder: the name and email you bought with, the order number and a signature. Checked on your computer, never sent anywhere. |
| When your trial started | trial.json in an Inkju Licence folder beside it. Two timestamps, nothing else. |
| Credentials for connections | secrets.json, encrypted by your operating system's key store — Keychain on macOS, DPAPI on Windows, libsecret on Linux. |
None of it is transmitted anywhere. Delete the app and the notes remain; delete the folders above and nothing of Inkju's is left.
The update check
If update checking is on, Inkju fetches https://inkju.md/updates/latest.json — a static file naming the current version — sending a user-agent of Inkju/<version>. Our host sees that and your IP address, as it would for anyone loading a page on this site. No identifier, no document, and nothing about you is included. If a newer version exists and you choose to install it, the download comes from the address named in that file, and Inkju refuses it unless it matches the checksum published alongside. Turn it off in Preferences → Check for new versions and Inkju makes no requests at all.
Buying Inkju
Payment happens on a checkout page run by Lemon Squeezy, who are the seller of record. Your card details go to them and never reach us or the app. They hold your name, email, billing country and what you bought, under their privacy policy, and send you the receipt and your license key.
To turn that key into a license, Inkju sends two things to https://inkju.md/api/licence: the key, and the name of your computer, so that a license can be moved from one machine to another later. That endpoint asks Lemon Squeezy whether the key is real and returns a signed license. It is contacted when you buy, when you enter a key, and when you move or recover a license — never by Inkju while you are simply using it. A license is checked on your own computer, with no network.
Nothing about your notes is part of any of this.
Asking an AI
Inkju can drive an AI command line you have already installed — Claude Code, Codex, opencode. It ships no model, holds no API key, and has no account with any AI provider. Nothing happens until you press send.
We are not in the middle of that either. When you ask a question, Inkju starts that program on your own machine and hands it your instruction and the open note. The request travels under that tool's account, to that tool's provider, under its policy and not this one. Nothing about it reaches us: there is no Inkju server for it to pass through.
- The agent is sent the open document, or just the selection if you have one. It is given no path into your vault and runs in an empty temporary directory that is deleted when the answer arrives.
- It is run with its file-editing and command-running abilities switched off, and Inkju refuses to start one whose description is missing those restrictions.
- An answer that suggests a change is shown to you as a difference against your text. Nothing is written to your note until you accept it.
- Nothing is sent on a timer or at startup. An agent runs when you press send, and you can stop it.
- What the AI provider does with what you send it is governed by whichever tool you chose and the account you signed it into.
Connecting a cloud account
Inkju can open notes that live somewhere other than your disk — Google Drive, or any service that speaks the Model Context Protocol. This is off unless you add a connection yourself.
We are not in the middle of it. Inkju has no server. Signing in happens between your computer and the provider, in your own browser. Files move between your computer and the provider. There is no point at which your documents or credentials reach us, because there is no "us" for them to reach.
Google Drive specifically
- Inkju requests one scope:
drive.file. That reaches the files you explicitly pick and files Inkju itself creates — not the rest of your Drive. It cannot browse, list or read anything you have not handed to it. - The access and refresh tokens Google issues are stored on your computer, encrypted by your operating system's key store. They are never transmitted to us.
- File contents pass directly between your computer and Google.
- You can withdraw access at any time at myaccount.google.com/permissions, or by removing the connection in Inkju, which deletes the stored credentials.
- What Google does with your Drive data is governed by Google's privacy policy, not this one.
Inkju's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Inkju does not transfer, sell or use that data for advertising, and no human at Inkju reads it — no copy of it exists outside your computer and your own Google account.
What we would have to tell you about, and cannot
There is no data to sell, share, disclose to third parties, transfer internationally or lose in a breach, because none is collected. If that ever changes — an account system, a sync service, anything with a server behind it — it will be announced before it ships, described here in specific terms, and it will be something you opt into rather than something that happens to you.
Your rights
Rights of access, correction, deletion and portability under the GDPR, the CCPA and similar laws all concern data a company holds about you. We hold none, so there is nothing to request. Your notes are already in your possession, in an open format, and you can read, edit, copy or delete them without asking anyone — which is rather the point of the app.
Children
Inkju is a text editor and is suitable for any age. It collects nothing from anyone, children included.
Changes
If this policy changes materially, the date below changes and the change is described in the release notes for the version it ships with. We will not quietly reword what Inkju does with your data.
Contact
Questions, corrections, or anything on this page that reads as untrue: support@inkju.md.
Last updated 24 August 2026. Much of what is claimed here you can confirm for yourself: your notes are plain files you can open with anything, and a network monitor will show you that Inkju is not talking to us, because there is no us to talk to.