About this policy
Pinleaf is an open-source desktop notes application maintained by Carlos R Moraes and contributors. This policy describes the desktop application and this project website. Google Drive backup is optional and applies to versions that include that feature; it is in development and is not included in the published 0.8.0 release.
Local data
Notes, profiles, groups, preferences and operational backup metadata are stored on your computer. Backup files can contain the complete note library, including hidden or deleted notes retained in the library, and related settings. Restore previews and recovery copies also contain library data and are stored locally. Pinleaf does not send your notes to a maintainer-operated server and includes no advertising, analytics or telemetry.
Optional Google Drive access
Pinleaf connects to Google only after you choose to authorize it in your browser. It requests https://www.googleapis.com/auth/drive.file, which limits access to files created by or explicitly made available to this app, rather than your entire Drive. Pinleaf uses your Google account email and account identifier to show the connected account and associate its credentials. It reads backup file identifiers, names, sizes, dates, checksums and application metadata to list and validate copies.
When you request a Drive backup, Pinleaf sends the selected backup content and file metadata directly from your computer to Google Drive over HTTPS. When you list or restore copies, it retrieves their metadata or content directly from Google. Backups are manual; there is no automatic note synchronization. The current app does not automatically delete or prune remote backups.
Storage and security
OAuth access and refresh tokens are stored in the system Secret Service keyring for that installation. If you explicitly select session-only access, credentials remain in application memory for that session. Tokens are not included in portable note backups. The distributed desktop OAuth client configuration identifies Pinleaf and is separate from your personal tokens.
Password-protected backups are encrypted locally before upload. Unprotected backups contain readable note data. Local notes and restore recovery copies are not protected by the portable backup password. Protect your computer, Google account and backup files accordingly. Pinleaf cannot recover a lost backup password.
Use and sharing of Google user data
Google user data is used only to provide the account connection and backup, discovery and restore features you request. Pinleaf does not sell this data, use it for advertising, credit decisions or training AI models, or send it to the maintainer. Pinleaf's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google processes data sent to its services under its own Privacy Policy.
Retention, deletion and your choices
You can use local notes without connecting Google Drive. Disconnecting removes the current installation's saved credentials when the keyring is accessible and clears its in-memory connection; it does not delete cloud backups or revoke other installations. You can revoke the app's access through Google Account connections and delete remote backups in Google Drive.
Local data, exports and recovery copies remain until you remove them; uninstalling Pinleaf does not remove your note library. To remove local data, close the app and remove its data directory (normally ~/.local/share/pinleaf, or your configured XDG data location), and any separately saved exports. Disconnect before removing the data directory to clear its saved keyring connection. Deleting local notes does not erase previously exported or uploaded copies. Google controls retention in its services, including Drive Trash.
Website and support
This static website uses no analytics scripts, advertising, tracking cookies or external font requests. It is hosted on an Amazon Web Services server, which receives your IP address and technical request information to deliver pages. Routine request access logging is disabled for this site. Limited, rotated error logs may contain technical request details used to diagnose availability or security problems. Website hosting does not receive your desktop notes or Google authorization tokens. If you visit the older GitHub Pages copy, its hosting provider may process connection information under the GitHub Privacy Statement. If you contact the project, the information you submit is processed by the service you use. GitHub issues are public: do not include private notes, passwords or OAuth tokens.
For privacy questions, contact Carlos R Moraes at carlos.moraes.as@gmail.com. For non-confidential support, use the issue tracker.
Changes
Updates to this policy will be published on this page with a revised date. Review it when updating Pinleaf, especially before enabling optional online features.