Privacy policy

Last updated October 27, 2026.

Washi is end-to-end encrypted. Your notes are encrypted on your device, with keys that come from your password, before they reach us. We can't read them, and your password never leaves your device.

What we store

• Your email address, to sign you in and write to you about your account.
• Your notes and settings, encrypted: everything you write, files and tags included. We only see how many there are, their sizes (rounded up) and when they changed.
• What we need to sign you in: a value derived from your password, and your notes' key encrypted with your password (and your recovery code, if you made one). Neither lets us read anything.
• When you created your account and last signed in.

Our server sees your IP address with each request, to limit abuse, and doesn't store it. Your browser keeps an encrypted copy of your notes so the app works offline; signing out deletes it.

What we don't do

No analytics, no trackers, no ads. One cookie keeps you signed in, and that's all.

Who else is involved

• Fly.io runs our server, Postmark sends our emails, and New Relic watches the server for errors. New Relic sees details about requests, like the page asked for and your browser, never your notes.
• YouTube videos and images from other websites in your notes load from those websites.

Sharing

A shared note is an encrypted copy. Its key is in the link, after the #, which browsers never send to a server: anyone with the link can read it, we can't. Stopping sharing, or deleting the note, deletes the copy.

Deleting

A deleted note's contents are removed from our server right away. You can delete your account and everything in it at any time from the app's settings, and it's gone from our server at once.

Found a security issue? Email security@washi.xyz.