Your notes are yours. Here's what we keep.

Plim encrypts your notes on your device, with keys made from twelve words only you hold. plim.fyi stores them, but can't read them. This page covers the hosted service at plim.fyi; a Plim server someone else runs is theirs to answer for.

name, email, phone: never asked for
notes, titles, tags, history: ciphertext only
IP address: used, not stored
cookies, analytics, ads: none
deleted notes: gone within 60 days
a deleted account: gone at once
backups: kept 30 days

who runs it

plim.fyi is run by Plim's maintainer. Write to privacy@plim.fyi with any question about this page or your data. Plim is open source: anyone can read the code that does what this page says, at github.com/plim-fyi/plim.

what the server can't see

The text of your notes, their titles and tags, their history, and the names people show in a shared note. All of it is encrypted on your device before it's uploaded, with keys that never leave your devices. We can't read it, and we can't recover it for you: your twelve words are the only way back into your notes.

what the server keeps

An account id, random, and your account's public key. No name, no email, no phone number: Plim never asks for them.
Your notes, encrypted: each edit, each version in a note's history, and your encrypted key ring. For each, when it was saved and how big it is.
Your passkeys' keys, encrypted, so a passkey can sign you in on a new device.
Sessions: a hash of each sign-in token, which expires after 15 minutes.
Shared notes: the encrypted note and its links' encrypted keys. The key to read it is in the part of the link browsers never send to a server.
Connections to AI agents you approve: a record of each, with keys only it can use. An agent reaches only the notes you share with agents, and you can disconnect it any time.

what the server sees, and doesn't keep

Your IP address and what your browser sends with each request: they're used while you're connected, to limit how fast one address can sign up or sign in, and to deliver live edits. They aren't written to the database.

Requests to plim.fyi pass through Cloudflare, which provides its secure connection and protection from attacks. Cloudflare sees IP addresses and requests, but never your notes' contents: those are encrypted before they leave your device. (Cloudflare's privacy policy.)

No cookies, no analytics, no ads, no tracking. The app keeps an encrypted copy of your notes and your settings in your browser, for itself, so it works offline.

how long

A deleted note stays in Recently deleted for 30 days, so you can restore it. After that (or when you choose Delete forever), the server keeps its encrypted data 30 days more, so it can still be restored, then removes it.
Deleting your account (Settings → Account → Delete account) removes everything of it from the server at once: notes, history, keys, sessions, and the notes you've shared.
Backups: the server's database is backed up every night, encrypted, and each backup is kept 30 days. So what you delete is gone from the backups within 30 days of leaving the server.

your choices

Take everything with you: Settings → Account → Export all notes saves every note as a plain Markdown file.
Delete everything: Settings → Account → Delete account.
Run your own server, and keep your notes on a machine of your choosing.
For anything else, write to privacy@plim.fyi.

changes

If what plim.fyi keeps changes, this page will say so first, with a new date at the top.