PRIVACY POLICY & DATA FLOW

Where your
words go.

App access, optional AI, indexing and local records have different boundaries.

Updated October 18, 2026. This policy includes development-preview behavior. Notes assistance and local application matching require an unreleased source build; do not assume the current download contains them.

01 · On your Mac

The working draft stays in process memory while you hide and reopen the panel. Quitting clears that working copy, but enabled Local Records can also save unsent drafts and activity to disk. Closing a panel does not delete those records or historical debug archives.

Preferences, app usage and operation records are stored locally. API keys use account-restricted local credential files, not the system Keychain. Jotway has no browsable inbox or resumable conversation history.

macOS permissions and selected Notes folders bound access. Apple apps may sync received content according to their own account settings.

02 · Review before saving

Confirming Notes writes to your selected folder. Jotway cannot retract content already received by another app.

Optional Notes assistance can add separate insights or related history. Notes retains the complete original even when optional assistance fails. Local application matching never sends typing-time drafts to an intent service.

03 · Optional network processing

Providers may charge for requests and apply their own retention policies. Deleting local data does not retract data already sent.

Notes indexing and related history

When enabled and configured, text from the chosen Notes scope is read and indexed locally. Indexing and queries can send text to the configured embedding service. The local index contains readable note content as well as vectors. Search covers the indexed scope and refresh state, not necessarily the entire or live library.

Notes AI assistance

Fast models generate titles and group Notes; deep models prepare optional supplements. Each capability has a primary and optional fallback model. On eligible service failures, the same text and context may be sent once to the fallback, and each service bills its own account. Accepted work keeps its frozen configuration. Cancellation and finite deadlines prevent late adoption; a model retry never repeats the Notes write. Connection tests call only the chosen model using sample content.

04 · Local records and clearing

Local Records
Text revisions, including unsent drafts, and routing or execution events may be saved. Settings → App Suggestions controls capture, retention (90 days by default), export and clearing. Turning capture off requires confirmation and deletes existing operation records.
Personal Agent archives
Historical question and model content from earlier versions remains untouched until manually deleted. Personal Agent is retired; current Notes model calls do not create these files. Technical-log clearing does not erase old archives.
Notes index
Indexed note text and vectors remain in the local index. Use the Notes history controls to manage its scope and index. Removing a service key does not itself erase already indexed text.
App usage
App identities, open counts and recent open times are stored separately. Clearing operation records does not clear app usage or data in Apple apps.

05 · Technical logs are separate

Runtime logs contain bounded stages, identifiers, outcomes and timings, not draft bodies or keys. They keep today and the previous six days, with 10 MB per file and 50 MB total. Settings → General → Runtime Logs offers open, export and clear controls.

Those controls do not clear Personal Agent full-content archives, operation records, preferences or provider-side data. Chrome Source is separately opt-in: it may read the front Chrome tab near a recent copy, with plain-text fallback when unavailable. It is independent of Clipboard history. There is no single control that erases all app data. Configuration and storage reference ↗

06 · This website

This static site has no accounts, analytics or external fonts. The illustrative demo contains only predefined fictional text. It does not open apps, read local data, call a model or persist choices. Cloudflare hosts the website and processes connection information, such as IP addresses and request metadata, to deliver and secure it. External links and downloads follow their services' data policies.

07 · Hosted AI and planned billing

In builds that offer Jotway AI, choosing that service sends the text and context needed for the requested feature through Jotway's hosted service to the selected model provider. The current configuration supports DeepSeek and Kimi. Requests can include draft text and relevant note context; processing is not confined to your Mac. Only enable AI for content you are comfortable sending to these services.

The hosted service uses activation credentials, account identifiers and request-usage records to authenticate access, manage allowances and operate the service. An activation credential is a secret; do not include it in support messages. Provider and infrastructure processing may take place outside your country, and provider-side retention is governed by those services' policies.

Paid subscriptions are not yet connected. When Paddle checkout is enabled, Paddle will collect the billing and payment information needed to process purchases and administer subscriptions under its privacy policy. Jotway will use the customer and subscription information needed to grant service access and provide support. This website does not currently collect card details or create paid subscriptions.

08 · Contact and your requests

Jotway is operated by an individual developer under the Jotway brand. Email liugq5713@gmail.com with privacy questions or requests to access, correct or delete information held by Jotway. Support messages and the information you choose to include are used to respond and resolve your request.

We may need to verify your identity before acting on an account request. Some records may need to be retained to meet legal obligations or resolve disputes. Data held only on your Mac must be managed with the local controls described above; removing it does not automatically erase data already sent to an external service.