Paperloom
Privacy Policy
Effective September 10, 2026
Paperloom is a local-first notes app for Mac. There is no Paperloom account and no Paperloom server that stores your notes. The App Store privacy label for Paperloom is “Data Not Collected”, and this page explains, feature by feature, why that is true.
At a glance
Every feature that touches data, and where that data goes.
| Feature | Where the data goes |
|---|---|
| Notes, issues, comments, attachments, version history, settings | Your Mac, in the app's sandbox container. Note bodies are plain Markdown text in a local database. |
| iCloud syncOptional | Your own private iCloud database (CloudKit), between Macs signed into your Apple Account. |
| Smart AutocompleteOptional | Runs on a language model inside your Mac. Model weights are downloaded once from Hugging Face; your text never leaves. |
| Calendar (meetings in Today)Optional | Read on this Mac through Apple's EventKit. Never transmitted. |
| GitHub (pull requests in Today)Optional | Between your Mac and GitHub only. You sign in with GitHub's device flow; the token lives in the macOS Keychain. |
| Apple Music controlsOptional | Apple Events to the Music app on this Mac, only when you press a control. |
| Paperloom Pro subscription | Apple, through StoreKit. Paperloom sees whether the subscription is active, never your payment details. |
| Analytics, advertising, tracking | None. No third-party SDKs. No App Tracking Transparency prompt, because there is nothing to track. |
What lives on your Mac
Everything you make in Paperloom — notes, issues, comments, attachments, tags, pins, version history and your settings — is stored on your Mac inside the app's sandbox container, in a local database. Note bodies are ordinary Markdown text, so they read the same wherever you paste them, and the bundled command-line tool can print any note as Markdown.
Paperloom does not upload your library anywhere as part of its normal operation. It does not have a server to upload it to.
iCloud sync
iCloud sync is off until you turn it on. When enabled, Paperloom uses Apple's CloudKit to move your library between Macs signed into the same Apple Account, through your private iCloud database. Apple's terms and privacy practices govern iCloud; Paperloom does not operate a sync server of its own and cannot read what is in your iCloud.
Smart Autocomplete
Autocomplete suggestions are produced by a language model that runs entirely on your Mac using Apple's MLX framework. The first time you enable it, Paperloom downloads the model weights from Hugging Face (the mlx-community repositories). That download is the only network activity involved: your notes are used as context on-device and are never sent to Hugging Face, to Paperloom, or to anyone else.
Turning autocomplete off stops inference immediately. Settings → Autocomplete has a Reveal in Finder button that opens the folder where models are stored, so you can remove one to reclaim space.
Calendar
If you allow it, Today shows your meetings beside your notes and nudges you before each one. Paperloom reads events through Apple's EventKit with the permission you grant in System Settings. Calendar data is read on this Mac and is not stored by Paperloom beyond what is needed to show the day, and it is never transmitted.
GitHub
If you connect GitHub, Today lists your open pull requests with their review and check status. You authorize Paperloom with GitHub's device flow, which means you sign in on github.com — Paperloom never sees your GitHub password, and no Paperloom server is involved in the exchange. The resulting access token is stored in the macOS Keychain, not in a file.
Paperloom then polls the GitHub API on your behalf. That traffic is between your Mac and GitHub. Disconnect at any time from Settings → Plugins, which deletes the token.
Apple Music
The Music page in the sidebar shows what is playing and lets you play, pause and skip. Paperloom does this by sending Apple Events to the Music app on your Mac, only when you press one of those controls, with the permission macOS asks you for the first time.
Subscriptions and payments
Paperloom Pro is an auto-renewing subscription sold by Apple through the App Store and StoreKit. Paperloom receives the entitlement status it needs to unlock features. Paperloom never receives your payment card details, your Apple Account password or your billing address.
Command-line tool, MCP server and agents
Paperloom includes a local command-line tool and an MCP server so an assistant you trust can search, read and edit your notes with guarded, reviewable operations. Both run as processes on your Mac and only work against your local library. Which agents or developer tools you connect to them is entirely your choice; those tools have their own privacy practices, and Paperloom does not send your note content to any Paperloom service on their behalf.
Analytics, advertising and tracking
Paperloom contains no analytics or advertising SDKs and performs no tracking across apps or websites. The only diagnostics that exist are Apple's own crash reports, which reach us only if you have opted into sharing them with developers in System Settings.
Support conversations
If you email support, you choose what to share — screenshots, logs, a description of the problem. We use it to answer you and to fix Paperloom, and we do not sell or share it.
Changes to this policy
When a new feature changes what Paperloom touches, this page changes with it and the effective date above moves. The GitHub, Calendar and Music sections were added for Paperloom 1.2.
Contact
Questions about this policy: alexwalz@icloud.com