Privacy Policy

When purchasing is available, the lifetime offer takes you to a checkout hosted by Dodo Payments, which sells the license as the merchant of record. Dodo Payments processes the name, email, billing, and payment information you provide to complete your purchase and deliver your receipt and license key. We can access purchase and license records in our merchant dashboard to help with orders and support; we do not receive your full card details.

Purchasing does not create a Locus account, subscribe you to marketing email, or share your notes. Payment and license records are separate from your local workspaces. Dodo Payments handles its checkout data under its privacy policy. After you pay, it returns you to locusnotes.app/activate with your license key and purchase details, such as your email address, in the page address; the page shows the key in your browser, removes them all from the address bar, and does not send them anywhere. For help with purchase data, contact [email protected].

Activating a license is optional and only possible in the Locus app downloaded from this website. When you choose to activate, Locus sends the license key you paste and a device label to our server at locusnotes.app, which forwards them to Dodo Payments to verify the key. The device label is your Mac’s model name, such as “MacBook Pro”, plus a few random characters; it never includes your computer’s name. Dodo Payments returns an activation ID, which the app keeps on your Mac and sends with your key when it re-checks the license (about once a week while you use Locus) and when you deactivate it.

These requests never include your notes or app content. Our server passes them on to Dodo Payments and does not store your license key. Dodo’s reply to an activation also contains the name and email on the purchase; our server reads only the activation ID and product from it, passes nothing else to the app, and keeps none of it. Dodo Payments keeps each activation and its device label with your license record, so it can count the Macs your license is active on. As with any web request, Cloudflare may process standard technical data such as your IP address and user agent. The Mac App Store version does not activate licenses and sends none of this.

Locus does not collect your notes, and it does not sell or share personal data. The app has no account system, analytics, crash reporting, advertising, or tracking frameworks. Under Apple’s App Privacy definitions, the Mac App Store version’s label is simply: Data Not Collected.

The version downloaded from this website contacts us for only two things. It uses Sparkle to request a signed update feed and download updates from downloads.locusnotes.app, and if you choose to activate a license, it checks that license as described under License activation above. Neither kind of request contains your notes or app content; as with ordinary web traffic, Cloudflare may process standard technical data such as your IP address and user agent.

When you ask Locus for a preview of a bookmarked link, it requests that page and its preview image directly from the linked website, as a browser would. That request goes to the website, not to us, and Locus never fetches previews in the background.

Everything you write is stored locally on your Mac, in a database for each workspace in your user Application Support folder, along with any images you add, automatic backups, and per-page version history. This data never leaves your machine unless you export or copy it yourself; a link preview sends only that link’s address, to the linked website. We could not read your notes if we wanted to — there is no channel through which they could reach us.

App Lock uses Apple’s LocalAuthentication framework (Touch ID, Apple Watch, or your Mac login password). Biometric information is handled entirely by macOS and Apple’s Secure Enclave; Locus never sees, stores, or transmits it — the system only tells the app whether authentication succeeded.

Apart from the license activations Dodo Payments keeps, the app collects no personal data, so there is no app data for us to retain or delete. Deleting the app and its Application Support folder removes everything stored by Locus on your Mac. Emails and feedback submitted on this website are separate from the app and are covered below.

When you request a ZIP from the website, we store the normalized email address you submit, the first and most recent submission times, the number of submissions, the first and most recent requested app version and build, the form source, and the privacy-policy version shown at submission. We do not store your notes, app activity, IP address, or browser user agent in the download-email database.

We use this record to provide and operate the requested direct download, protect the form from abuse, and understand which direct releases people request. We may also occasionally email the address about Locus, such as new releases and offers. Every such email says how to stop them: reply “unsubscribe”, or write to [email protected], and we will not email you about Locus again. We do not sell the address, share it for advertising or marketing by others, or combine it with notes or other app data. Cloudflare processes and stores it on our behalf as the website and D1 database provider. The Locus app and its update checks never receive it.

We retain a download email while it is needed to operate the direct download program and send these occasional emails, or until you ask us to remove it. You can request deletion at any time by writing to [email protected]. Include the submitted address so we can locate it.

When you send a message through the feedback button on this website, we store the name, normalized email address, and message you submit, the time it was sent, the path of the page you sent it from, the form source, and the privacy-policy version shown at submission. We do not store your IP address or browser user agent with it, and the Locus app never sends feedback or app content on its own.

We use your message to understand what works and what to improve, and your name and email only to reply or ask a follow-up question about it. Sending feedback is not consent to marketing email, and we do not sell or share it for advertising. Cloudflare stores it on our behalf in the same D1 database as download emails, in a separate table. Cloudflare also emails a copy to our support address, [email protected], which forwards to our Gmail inbox. Google processes and stores that email on our behalf. We keep the database and email copies while they are useful for improving Locus, or until you ask us to remove them at the contact address above.

We also use Cloudflare to send a short acknowledgement to the email address you provide, confirming that your feedback was received. This is a service message, not a marketing subscription.

Locusnotes.app no longer accepts waitlist signups. If you joined before July 23, 2026, the email address you submitted remains in a separate Cloudflare D1 database. It is used only to manage the former waitlist and send the availability, early-access, or launch updates described when you joined. A former waitlist signup did not create an account. You can request deletion at the contact address above.

Locusnotes.app sets no cookies, runs no analytics or tracking scripts, and includes no third-party embeds. Cloudflare may process standard technical logs — such as IP address, user agent, and requested page — to serve, secure, and rate-limit the site, as described in Cloudflare’s privacy policy. We do not access, combine, or analyze such logs to identify visitors.

Apart from optional license activation, the Locus app does not collect personal data from anyone, including children. The website download form, feedback form, and former waitlist are not directed to children under 13, and we do not knowingly seek their names or email addresses. If you believe a child submitted an email, contact us and we will delete it.

We will revise the date above when these practices materially change. If the Locus app ever gains a feature that sends notes, app content, or personal data off your machine, this policy will be updated before that feature ships. The current app architecture keeps that content local, and we consider that a feature.

Questions about this policy: [email protected].