Pinned Notes Privacy Policy

BHD does not collect or receive personal data from Pinned Notes. There is no analytics, telemetry, crash reporting, account, sign-in or developer-controlled server. Your notes and recordings stay on your Mac. The app makes no network request at all until you configure one of the two optional destinations described below.

What stays on your Mac

Everything you write or record is stored inside the app's own sandbox container, in Application Support, on this Mac. None of it is uploaded anywhere by us.

• Your notes, including the inline maths, the checklists and the snippets.
• Your recordings, saved as audio files beside the note they belong to.
• Your transcripts, produced on this Mac.
• Your settings, in the app's preferences. Your Notion token and any model API key are held in the macOS Keychain instead, never in the preferences file.

Microphone and speech recognition

Pinned Notes asks for the microphone only at the moment you press record, and records only while you have asked it to. It never listens at any other time.

Turning a recording into text uses Apple's speech recogniser with requiresOnDeviceRecognition set. That is fixed in the code and is not a preference you or we can change: the audio is transcribed on this Mac and is not sent to Apple's servers for recognition. If a language has no on-device model installed, the app reports that rather than falling back to a network request.

Read my note

Summarising, tidying or titling a note runs on this Mac using Apple Intelligence through the FoundationModels framework, where the operating system provides it. On a macOS version that does not, the app tells you the model is unavailable. It does not send the note somewhere else instead.

External connections

Pinned Notes has no developer-controlled server. There are exactly two connections it can make, both empty until you set them up, plus Apple's own purchase traffic:

• A model endpoint you choose. Empty by default. If you enter the address of your own OpenAI-compatible server, the text of the note you act on is sent to that server so it can answer. You choose the server, and it is the operator of that server, not BHD, who receives the note. Clear the field and the app stops making the request.
• Notion. Off until you create your own Notion integration and paste its token. When you send a note, that note's title and contents go to Notion's API under your token, into the page or database you named. Notion receives it under your own workspace's terms. BHD receives nothing.
• StoreKit. Apple handles the Pinned Notes Pro purchase, restores and subscription status. Apple receives its own transaction traffic. We receive no payment details, Apple Account information, name or identity.

That is the complete list. With both fields unset, Pinned Notes makes no network requests of its own.

Purchases

Pinned Notes Pro is an auto-renewable subscription handled entirely by Apple. BHD does not receive your payment details, Apple Account or name. Apple tells the app whether a valid subscription exists. Writing notes, the inline maths, the checklists and every placement option are free and stay usable without a subscription.

Data we hold about you

BHD holds none. There is no Pinned Notes server, database or account system, so BHD has no copy of your notes, recordings, transcripts or settings to provide, sell or delete. Moving Pinned Notes to the Trash removes the app bundle, but macOS may retain its sandbox container. To erase your notes, recordings and settings too, quit Pinned Notes and remove ~/Library/Containers/om.pinned.notes/. Your Notion token and model API key are in the Keychain and are removed with the app's Keychain items.

Children

Pinned Notes is a writing utility with no messaging, no social features and no advertising. The notes it holds are your own and are not shared with anyone by the app. BHD does not collect or receive personal data from anyone through Pinned Notes, including children.

Changes

If this policy ever changes, the date above changes with it. If a future version sends BHD personal data or adds another external connection, that will be stated here plainly before it ships.