01 · Scope and operator
This policy covers the Nowen Note Windows desktop application, including its Microsoft Store distribution and direct desktop installer. The open-source project is maintained by the NOWEN Open Source Lab (Nowen Note project maintainers). The official website is nowen.cn; source code and support are available on GitHub.
The application can run locally on your device or connect to a server operated by you or your organization. The operator of a self-hosted server independently controls its processing, access policies, retention and legal responsibilities. Installing the app does not automatically send your notes to the project maintainers. Read the relevant server operator's privacy policy when using a third-party hosted instance.
02 · Information processed
Depending on the features used, the application may access or process:
- Notes and content: text, Markdown, rich-text documents, tags, folders, journals, tasks, images, attachments, comments, shared content and revisions.
- Account and security data: usernames, authentication credentials or session tokens, server endpoints, permissions, two-factor authentication settings and API token configuration.
- Local preferences and data: application settings, workspace selection, local databases, offline caches and update status.
- Diagnostics: app version, operating-system information, error and activity logs and local crash dumps; logs may incidentally contain file paths or sensitive context.
- Optional integration data: content sent to configured AI/embedding services, data accessed by authorized plugins and files delivered to configured sync or backup destinations.
Basic offline editing does not require access to your contacts or precise location. Files selected through system pickers are processed to perform the actions you request.
03 · Local storage, servers and sync
Local use: Notes, attachments, caches, settings and diagnostic logs may be saved in the app's user-data directory or a custom location selected by the user. Purely local use does not require uploading your entire knowledge base to a NOWEN-operated service.
Remote connections: When you connect to a Nowen Note server, information needed for authentication, syncing, attachments, collaboration and sharing is exchanged with that chosen server. The server operator may process account information, content, IP addresses, access times and server logs, subject to its policies and configuration.
Sharing: When you enable public links or grant other users access, the selected content may become available to link holders or authorized collaborators. Review permissions, expiry dates and passwords.
04 · AI, embeddings and external models
AI writing, chat, embeddings, indexing and related automation are optional features. When used, your questions, selected text, the current note or retrieved knowledge excerpts may be sent to an AI/API provider configured by you or your server administrator.
Knowledge-base chat generally retrieves relevant excerpts instead of transmitting every note with each question. However, creating an index using online embeddings can send selected document content to an online embedding provider. Using a local model (such as a self-hosted Ollama instance) can reduce third-party cloud transfers. Provider retention and training practices are governed by their own policies.
Do not submit another person's sensitive information, passwords, identity documents, recovery phrases or confidential content to external models without appropriate authority. Do not enable an online integration if you do not wish to send the relevant content to that provider.
05 · Plugins, attachments and external services
Plugins and integrations you choose to install, enable or authorize may access notes, tasks, attachments or network endpoints within their granted permissions. Review each plugin's provenance, access and external endpoints; third-party extensions may have their own privacy terms.
Services configured by you or your administrator—including S3, R2, MinIO, WebDAV, email backups, webhooks, MCP clients, remote images and web clipping sources—may receive data necessary for their functions. Loading remote images may also expose request and network information to the image host. Each external provider is responsible for its own processing.
To check for or obtain updates, the app may contact GitHub Releases or Microsoft Store. Those platforms may process IP addresses and update requests in accordance with their own policies. Microsoft Store manages installation, signing and updates for its version of the app.
06 · Diagnostics and crash reporting
The Windows app records local diagnostic and error logs and can store local crash dumps for troubleshooting. The current desktop implementation does not automatically upload crash reports to the project maintainers by default. If you voluntarily share logs in an issue, email or other support channel, the supplied information is used to investigate your request.
Main-process logs are date-rotated and the current implementation attempts to remove main log files older than approximately 14 days when the app starts. Crash dumps, server logs, backups and user-submitted reports may have different retention rules and are not all deleted after 14 days.
Microsoft Store, GitHub, your chosen server and other configured services may record their own access or installation diagnostics under their own terms.
07 · Purposes and disclosures
Information is processed as needed for the features you request or enable, including local editing and search, authentication, sync, file management, backups, AI calls, updates, troubleshooting and security. Necessary service processing may be based on providing a requested service, consent where applicable, security needs or legal obligations under relevant law.
Running the open-source software on your own device or server does not by itself grant the NOWEN maintainers access to your content. We do not sell your notes or personal information. When you choose to connect to third-party servers, model providers or storage destinations, data relevant to that connection may be transferred to the recipients you select. International transfer considerations depend on your selected providers and hosting regions.
08 · Your controls and rights
- View, edit, export or delete your own notes, attachments, tasks and other content within the permissions available to your account.
- Choose local-only use; disconnect remote servers; stop using AI, plugins, backups or integrations; revoke API tokens and shared links as appropriate.
- For information held by a remote server, contact that server's operator to request access, correction, export or deletion. The project maintainers typically cannot access a self-hosted database.
- Uninstalling the app may not erase all local user-data folders, standalone backups, remote copies or Microsoft Store records. Review and remove those separately after backing up anything important.
For questions addressed to the NOWEN project maintainers, use the contact information below. GitHub Issues are public. Do not post government IDs, passwords, access tokens, full private notes or sensitive information in an issue.
09 · Security
The project offers authentication, access control, token management and some encryption and backup protections. Protect remote connections with HTTPS, use strong passwords and multi-factor authentication where available, keep software updated, maintain backups and carefully review plugin permissions.
Not all stored or synchronized content is end-to-end encrypted by default; some encrypted-note features remain in development. No software or network service can guarantee perfect security. You are responsible for securing your devices, server and third-party accounts.
10 · Retention and cross-border processing
Local content and settings generally remain until deleted, moved or cleared by the user. Server-side data, audit records and backups follow the selected operator's configuration. AI providers, cloud storage and sync destinations follow their own policies. Microsoft handles Store-related installation records.
Because you may choose providers hosted in different countries, your content may be processed in those locations. Check the destination provider's location, terms and legal requirements before transferring sensitive information.
11 · Children
Nowen Note is a general-purpose note-taking and knowledge management tool and is not designed specifically to solicit children's personal information. Minors should use the service with guidance from a parent or guardian and avoid disclosing sensitive data without authorization. Server operators and providers must comply with applicable rules for children's information.
12 · Changes to this policy
We may update this policy to reflect desktop features, distribution channels and applicable requirements. We will update the effective date on this page. Where significant changes affect data use or external transfers, appropriate notice and choices should be provided.
13 · Contact and support
Project: Nowen Note / NOWEN Open Source Lab
Website: https://nowen.cn/
Support: https://github.com/cropflre/nowen-note/issues
Source: https://github.com/cropflre/nowen-note
Public GitHub Issues should contain only non-sensitive information. Request a suitable private communication channel before sharing confidential details. For information on servers hosted by others, contact the relevant server administrator first.