Privacy.

The short version

• Your original captures are files on your disk. They are not uploaded automatically.
• There is no account or sign-in requirement.
• You can deliberately create an encrypted Live Jot for collaboration. It expires after seven days, and you can remove it sooner.
• AI text goes directly to the provider whose key you supplied. It does not pass through us.
• There is no advertising, profiling, or sale of personal data.

Who is responsible

Wrivio Jot is made by Wrivio (the individual who makes Jot). For anything on this page, write to hello@wrivio.com. A postal address for data-protection correspondence is available on request; a permanent public correspondence address has not yet been supplied for this page.

What stays on your computer

Your committed captures and meeting data stay in Jot's data folder on your machine - your Windows app-data folder if you installed the direct download, or the app's own storage if you installed from the Microsoft Store. The support page explains where to find and back up that folder. The local folder contains:

• A SQLite database holding every capture: the text you typed, the parsed title, any due and reminder times, tags, destination list, whether it is done, and the name of the application that had focus when you pressed the hotkey.
• A rotating daily backup of that database, kept for seven days in a subfolder. Local copies, never uploaded.
• Your settings - hotkey, theme, which mode the overlay opens in - in the same database.
• An unsent draft, if you dismissed the overlay with text in it. One at a time, discarded after a day.
• Meeting minutes: each meeting's title, start and end time, the names you typed as attendees or owners, every line you jotted, and which actions are ticked. Your own actions are also saved as ordinary todos. Names are whatever you typed - Jot does not look people up.

While you edit a note or todo, Jot also keeps a temporary recovery copy in the embedded browser's local storage on your device. It clears that copy after the latest edit is saved, so an interrupted save can be recovered.

You can open that database with any SQLite tool, copy it to another machine, or delete the folder. If you created a Live Jot, that separate encrypted web copy remains available until you stop sharing it or its seven-day lifetime ends.

What leaves your computer, and only when you ask

Seven-day Live Jots

When you press Create 7-day web copy, Jot encrypts the selected note or todo before sending it to our Cloudflare-hosted collaboration service. This is optional, requires no account, and does not continuously sync your local database. Edits made through the link stay in the temporary web copy.

• What is stored: encrypted content, a random identifier, cryptographic hashes of the edit and owner capabilities, version numbers, and creation, update, and expiry times. The service does not receive the decryption key.
• Where the key is: after the # in the shared URL. Browsers do not send that fragment to the server, but anyone who receives the complete link can decrypt and edit the Live Jot. Treat the link as private.
• Retention: access ends exactly seven days after creation, or immediately when the owner presses Stop. Expired database rows are removed by a daily cleanup job.
• Infrastructure: Cloudflare processes the requests and may keep ordinary security and request metadata such as an IP address under its own service terms. We do not add product analytics or advertising identifiers.

AI features, with your own key

Off unless you paste in an API key. Jot has no AI service and no key of its own; the text goes from your machine directly to the provider you chose - Anthropic or OpenAI - under whatever agreement you have with them.

• What is sent, and when: the text of the specific capture you pressed the button on. Nothing is sent in the background, on a schedule, or on capture. One button, one request.
• What we see: nothing. The request does not touch us. We cannot read the text, we cannot read your key, and there is no telemetry recording that you used the feature.
• Where the key is kept: encrypted with the Windows Data Protection API, in a file next to the database so it stays out of local backups. One key at a time; switching provider replaces it.
• Nothing is applied automatically. Every suggestion is shown to you and does nothing until you accept it.

Reply in Outlook, for meeting minutes

Off until you turn it on - Jot asks once, and only if classic Outlook is installed. When on and you end a meeting, Jot asks the Outlook already on your PC which calendar meeting was on at that time, reads its subject and attendee addresses, and opens a new, unsent email to them with the minutes in it.

• Where it happens: entirely on your computer, between Jot and Outlook. Nothing is sent to us or to any server by Jot; Outlook sends the email only when you press Send.
• What is kept: nothing from your calendar is stored in Jot's database.
• Without it: Copy minutes puts the minutes on your clipboard for any mail app, and touches nothing else.

Screen sharing

By default the capture box, the meeting pill and the save confirmation are hidden from screen sharing, recordings and screenshots, while staying visible to you. This is a Windows setting on those windows; nothing is sent anywhere. You can turn it off in Settings.

What is never collected

• Your unshared capture library is never uploaded. Only the selected content for an AI action or a Live Jot leaves your computer, after you press the corresponding button.
• No usage analytics. Jot does not track how often you use features or upload your unshared notes, todos or meeting minutes.
• No advertising, no profiling, and no data sold. Cloudflare hosts encrypted Live Jots; AI requests go to the provider the user explicitly selected.

Crash reports and updates

This release has no Sentry connection and sends no app-operated crash reports. Microsoft Store Health may receive crash and hang data under your Windows diagnostic settings; Jot does not control that setting.

Store installations ask Microsoft Store whether a Jot update is available, at most once a day while Jot runs or when you press Check now. The Store handles downloads and installation. No capture content is included in the update check.

This website

• No cookies. The site sets none, and nothing on the page can identify you or follow you to another site.
• Nothing is loaded from anywhere else. Fonts, styles and scripts are all served from this domain. The site's content policy forbids the browser from fetching anything off-origin, and the build fails if a page tries.
• Aggregate page counts. Our host counts page views so we know whether anyone read this. It is cookieless, it does not build a profile, and it cannot follow you to another site.
• Server logs. Our host keeps standard request logs, including IP addresses, for a limited period. That is a normal part of running a website and we do not analyse them.

The launch-notification list

If you give us an email address, it is used for exactly one thing: one message when there is something to download. It is passed to a mailing-list provider and stored nowhere else. No newsletter, no drip sequence, no sale or transfer to anyone.

Reply to that message, or write to hello@wrivio.com at any time before it, and the address is deleted.

Your rights

If you are in the UK or the EU, data protection law gives you the right to see what personal data is held about you, to correct it, to have it deleted, to object to its processing, and to complain to your national supervisory authority.

In practice, the data we can associate with you is an email address you gave us for launch notification and ordinary request metadata produced when a Live Jot is used. The Live Jot content itself is encrypted and has no account identifier. Everything else is on your own machine or in your own account with Microsoft or an AI provider. To exercise any of these rights, write to hello@wrivio.com.

The lawful basis for holding an address you typed into the launch form is your consent, which you can withdraw at any time by asking.

Children

Jot is a productivity tool for adults. It is not directed at children and we do not knowingly collect anything from them.

Changes

When the meaning of this page changes, the date at the top changes with it. If a change affects what leaves your machine, it will be described here before the feature that causes it ships, not afterwards.

The repository is public, and this page is a file in it. Its history is the changelog.