Your documents stay on your Mac. MojoPad has no accounts and no sync service. Nothing you write is ever uploaded, and we cannot read your notes because they never reach us. There is no third-party analytics, no advertising, and no tracking script — on this website or in the app. The one thing we do count is described below, in plain terms, because a promise you have to take on faith is worth less than one you can check.
A MojoPad document is a folder of plain JSON and your original files, kept wherever you choose. Preferences, automatic backups, and the application log live in your user Library folder. Encrypted pages and password-protected documents are AES-256 encrypted on disk.
MojoPad makes exactly two kinds of network request, both small and both readable:
Update check. At launch (and when you choose Check for Updates…), the app fetches a small file from mojopad.app containing the latest version number, and tells us which version you are running — that is how we know when a version is old enough to stop supporting. Nothing about you, your Mac, or your documents is sent.
Because that request reaches our server, we count it, so we can tell roughly how many people use MojoPad. We record one row per install per day: the day, the app version, and the country the request came from. Your IP address is never stored — it is turned into a one-way hash that also mixes in the date, so it cannot be reversed into an address, and the same Mac produces a different value tomorrow. That makes the count deliberately incapable of following anyone from one day to the next. Turn the whole thing off in Settings ▸ Updates and you disappear from it entirely.
License activation. When you activate a license (and in an occasional quiet re-check), the app sends your license key and your Mac's computer name to Lemon Squeezy, our payment provider, to confirm the key is genuine. No document content, names, or usage data is ever included. During the free trial — and if you never buy — this request never happens.
MojoPad's AI talks only to Ollama running on your own machine (127.0.0.1). Page content is sent to that local process and nowhere else.
If you ask us for help, you may choose to send a diagnostic report (Help ▸ Save Diagnostic Report…). It contains technical details — versions, preferences, document statistics, and recent log lines — and never page names, page content, or passwords. You can read the file before sending it; nothing is transmitted automatically.
The optional Clip to MojoPad browser extension has its own privacy policy. In short: what you clip goes only to the MojoPad app on your own computer — never to a server.