Privacy Policy

Last updated October 15, 2026

Einso keeps your boards on your device. Nothing is uploaded unless you share a board, sync it, or use a feature that needs an outside service. This policy covers the Einso app for iPhone, iPad and Mac, and the einso.app website.

The short version

• There is no Einso account, and no advertising, analytics or tracking.
• Boards you share or sync are end-to-end encrypted before they leave your device. Our server can’t read them.
• Some features send what you ask about to another service, such as a link you add or a city for a weather card. Each is listed below.
• You can delete your data at any time. See “Deleting your data”.

On your device

Your boards, cards, pictures, recordings and settings are stored in the app’s storage on your device, and in your device backups if you use them. Search, picture descriptions and text recognition run on your device. Voice memos and the speech in videos are transcribed on your device.

The app only asks for these permissions when you use the feature that needs them:

• Camera: to photograph or scan things onto a board.
• Microphone and speech recognition: to record voice memos and transcribe them on your device.
• Photos: pictures you pick are copied onto the board; the app saves to Photos only when you ask.
• Location: to give directions from where you are on a map card. Your location goes to Apple Maps for the route, and is not stored by Einso.
• Calendars, Reminders and Contacts: to show your events on calendar cards, and to add to-dos or contacts when you ask. This stays on your device.
• Face ID or Touch ID: to unlock boards you have locked. Einso never sees your face or fingerprint data.
• Local network: to find people nearby so you can work on a board together.

Sharing and syncing boards

When you turn on “Keep this board synced” or share a board by link, the app encrypts the board and its media on your device before uploading them. They are stored using Netlify Functions and Netlify Blobs. The key to decrypt a board is in the link itself, after the “#”, and is never sent to our server. Anyone you give the full link to can open the board.

Our server receives encrypted content, a credential derived from the link, a random identifier for each copy of the app (used for live presence), link settings such as expiry, and technical request details such as IP addresses. While you are on a shared board, your display name, selection and view are shared with the other people on it, also encrypted.

People with a board’s link can add notes, drawings, stickies, and photos or videos on top of it if the owner allows it. These are encrypted the same way and signed with the name each person enters. The board owner can hide or remove them, or turn notes off.

Working together nearby (Multipeer Connectivity) or over FaceTime (SharePlay) sends board changes directly between the devices in the session, encrypted.

Services the app talks to

These services receive a request only when you use the feature, and only what that feature needs:

• AI: on iPhone and iPad, AI features use Apple Intelligence on your device, and card text never leaves it. On a Mac you can choose instead to add your own OpenRouter key; then the text of the cards you ask about is sent to OpenRouter and the model provider you choose, and handled under their terms. Your key is stored in your Mac’s keychain.
• AI apps sending to Einso (optional): if you connect an AI app such as Claude or ChatGPT (with Connect, which you approve in Einso, or with your device’s private connector link), it can send boards to your device. What the AI app sends through it (the cards and drawings it makes) passes through einso.app, where it is immediately encrypted so only your device can open it, and is deleted once your device collects it. The AI app can add to boards; it can’t read them. If you ask it to share a board, Einso makes that board’s view-only link on your device and sends the link back through einso.app to the AI app, which can then open the board like anyone you give the link to. Turning the switch off in Einso disconnects every AI app at once. einso.app keeps a random identifier for each connected app so it can tell them apart; it is deleted when you disconnect.
• AI tools on a Mac (optional): if you turn on “Let AI tools use Einso” and connect an assistant such as Claude or Codex, that assistant can read and change your boards through a connection that stays on your Mac. What it reads is sent to the assistant’s provider (for example Anthropic or OpenAI) under your account with them. It is off until you turn it on, and locked boards stay closed.
• Links and previews: when you add a link, the app fetches that page to build a preview. Video, music and post cards load the service’s own player (for example YouTube, Vimeo, Spotify or SoundCloud), which works under that service’s privacy policy. Previews for some sites use the GitHub, Bluesky or Wikipedia public services.
• Live cards: most go through einso.app, which asks the provider for you, shares one answer between everyone, and passes on only what the card needs: stock cards send the ticker (data from Marketstack); sports cards send the league and team (TheSportsDB); weather cards send the city you type (Apple WeatherKit and Apple Maps); space picture cards ask NASA for the day’s picture; earthquake cards ask the US Geological Survey for recent earthquakes; calendar cards ask for your country’s public holidays (Nager.Date); currency cards ask for the day’s exchange rates (European Central Bank, through Frankfurter). einso.app doesn’t keep these requests. Book cards send the title to Open Library; film, album and podcast cards send it to Apple’s iTunes Search. Picture search sends your search words to Wikipedia, Wikimedia Commons and, through einso.app, Unsplash.
• Maps and translation: map cards use Apple Maps. Translation uses Apple’s Translation on your device, or the AI model you use when on-device translation isn’t available.
• Imports: importing from FigJam sends the Figma token you enter, and the file you choose, to Figma. The token is stored in your device’s keychain.
• Search model download (optional): if you download the smarter search model (EmbeddingGemma 2, by Google, under the Apache License 2.0), it comes from Hugging Face, where we publish a smaller copy of Google’s model (the same licence); Hugging Face sees an ordinary download request. The model then runs entirely on your device.
• Reports: if you report a shared board or someone’s notes, we receive the reason, anything you write, the board’s view-only link (so we can look at it) and a one-way fingerprint of the board, never a key that could change it. We keep reports only as long as we need them to act.

The website

The demo board on einso.app stores your notes in your browser’s local storage, and doesn’t upload them. The site is hosted by Netlify, which processes technical request information such as IP addresses (see Netlify’s privacy policy). Fonts come from Google Fonts, so your browser connects to Google (see Google Fonts’ privacy information). The website has no analytics or advertising scripts. Shared boards opened in a browser are decrypted in the browser, as in the app.

Deleting your data

• A board: deleting it moves it to Recently Deleted (the Trash on a Mac), where you can restore it or delete it for good.
• A shared or synced board: use Stop sharing in the board’s Share menu. This deletes the cloud copy and stops the link working. A small record remains so that offline copies can’t upload it again. People you shared with may keep their own copies.
• Your notes on someone else’s board: you can remove them; the board owner can also remove them.
• Everything: in the app, Settings, then About, then Delete my data removes everything held on our server for you at once (your shared boards’ copies and the AI apps’ inbox), and can also move every board on your device to the Trash. Deleting the app removes its data from your device. You can also email us to ask for anything held on our server to be deleted.

Children

Einso is not directed to children under 13, and we do not knowingly collect personal information from them.

Changes

If our data practices change, we will update this page and the date above.

Contact

Questions or requests about privacy: hello@jbiller.com. For help with the app, see Support.