notes · markdown · end-to-end encrypted

Your notes, on every device.
Decide how to collaborate with AI agents.

Plim is a fast, quiet place to write things down. Plain markdown, synced to your phone, your laptop and your terminal in under a second, and encrypted before it ever leaves the device. No account to create. No password to remember.

Start writing How it stays private

passwords: 0
sync: <1 s
cipher: AES-256
recovery: 12 words
works offline: yes

Plim in Safari on a computer: the list of notes on the left, a Lisbon trip note open as a page, with its tags, tasks and a budget table

The same note in Plim in Safari on an iPhone

your own ai apps notes as the backend

The backend for your AI app is a note.

Skip the database. An app you build with an AI agent can keep its data in Plim: plain markdown you can open, read and fix yourself on any device, encrypted end to end, with every change it makes kept in History under its name.

Take a gym log. You write each workout on your phone, in a note tagged gym: the lift, then its sets. Every evening a short script hands the new ones to Claude, which reviews them and writes your next session back into your notes. No server to run, no tables, no sign-in of its own: by morning the plan is on your phone, and you can change it like any other note.

The same notes feed whatever else you build on them, like a dashboard: streaks, a training calendar, estimated maxes, records, what's overdue. The workouts stay the record, in your words; the apps read them and draw.

The script runs with plim on a machine you trust. To give it less, hand it one note's share link instead: the link opens that note alone.

1 · you, at the gym

Leg day · gym, gym/legs
squat 215x5 215x5 215x5 215x5 215x5
romanian deadlift 185x8 185x8 185x8

2 · the coach, every evening

$ plim cat --tag gym \
| claude -p "Review these. Plan the next one." \
| plim add --as Coach

3 · you, the next morning by Coach · kept in History

Upcoming · gym/pending
squat 5x5 @ 220: every rep was clean last time.
Keep the deadlifts at 185: the last set slowed down.

4 · a dashboard, from the same notes · made-up numbers

streak: 8 wk
sessions · 4 wk: 14
per week: 3.5
volume · this week: 41,200 lb
records · oct: 3

sets a day · 8 weeks

none → 16+ sets

estimated 1RM · 8 weeks

squat 250 lb +35

bench 185 lb +20

deadlift 315 lb +40

last trained

legs	1 d
chest	2 d
back	3 d
shoulders	6 d	due
arms	8 d	due

records · squat 215x5, deadlift 295x2

features 10 everywhere

Everything you expect from a notes app, and a few things you'd only notice once they're missing.

Just markdown

Write in plain text with headings, lists, tables and checkboxes. Flip to Preview, or see both side by side with Split. Your notes stay portable, forever.

Sign in with biometrics

Passkeys mean Face ID, Touch ID or Windows Hello is the whole login. Twelve words are your backup, and nobody can reset them for you, or for anyone else.

Instant sync

An edit on your laptop shows up on your phone before you've looked over. Two devices edited offline merge cleanly, with no conflicts to sort out.

Works offline

On a plane, in a tunnel, in a basement café: Plim opens, unlocks and saves without a connection, and catches up when you're back.

Share a note, live

Send a link to edit or one to view. No account needed to open it. Everyone's cursor and edits appear live, still end-to-end encrypted.

Every version, kept

History keeps earlier versions of each note, says what changed in each, and puts any one back in a click.

Search that's yours

Find any word, whatever its accents or case. Search runs on your device, because the server can't read your notes to search them.

Tags, not folders

Tag a note #travel or #travel/portugal and pick a tag to see just those. Title and tags live in the note's frontmatter, like other markdown tools.

Feels like an app

Add it to your home screen and it opens full screen, with no bounce and no zoom. On a phone, a note opens as a page; tap a word to edit right there.

Nothing lost

Deleted a note by mistake? Undo, or restore it from Recently deleted any time in the next 30 days.

private by design end to end

The server stores your notes. It just can't read them.

Your keys are made on your device, from twelve words only you hold. Every note gets its own key, and every edit is encrypted and signed before it's uploaded. What reaches the server is ciphertext: no titles, no text, no tags.

A shared note's key travels in the part of the link browsers never send to a server. Even a view link can't forge an edit, because every change is checked against a signature.

Make a vault in ten seconds

your 12 wordsheld by you
seedon your device
signing key + vault keywho you are, what opens your notes
a key for every noteAES-256-GCM
ciphertextall the server ever sees

	you	server
note text	yes	no
titles & tags	yes	no
who's in a shared note	yes	no
that a note exists	yes	yes

ai agents on your terms

Let Claude read the notes you choose. Only those.

Connect Claude, or any app that speaks MCP, and flip Agents on the notes it should see. It can search them, add to them, tag them and start new ones. Everything else stays out of reach: as far as the agent can tell, your other notes don't exist.

Every change an agent makes is kept as a version with its name on it, and its lines are marked in the margin. One click takes any of it back. It can't delete a thing.

you

What did I decide about the Lisbon flights?

claude

From your note Lisbon trip: out Thursday 08:40, back Sunday 19:15. Want me to add the Sintra day trip to the to-do list?

you

Yes, Saturday morning.

claude edited · kept in History

Added “Sintra, Saturday morning” under To do.

Connecting Claude doesn't open a back door.

Plim's server still only ever holds ciphertext. Claude gets a connection of its own, and your app shares each note you switch on with that connection the way it shares one with a person: with a key made for it, sealed to a secret only the connection has. Claude never sees your twelve words, your vault key, or the keys to anything else.

The connector, the small service Claude talks to, keeps no notes and no keys. Claude's token is the connection's secret, sealed so that only the connector can open it. When Claude asks for a note, the connector fetches it still encrypted, opens it in memory for that one answer, and forgets it.

Plainly: to answer, the connector does read the notes you shared with agents, and what Claude reads goes to Anthropic, as anything you tell Claude does. Notes you didn't share never leave your devices readable.

you connect Claudeyour app makes the connection's secret
you flip Agents on a notethe note's key, sealed to that secret
Claude asksits token, sealed: only the connector opens it
the connectorfetches the ciphertext, opens it in memory, keeps nothing
Disconnectits keys are gone, at once

	server	claude
notes shared with agents	no	yes
your other notes	no	no
your 12 words & keys	no	no
your list of notes	no	no

terminal plim

Your notes in the terminal, too.

plim is a native client for Linux: a fast list-and-editor TUI, your own $EDITOR with edits merged live, and commands that fit in a pipe. Same notes, same encryption, done locally.

# a note from anywhere
$ echo "call the dentist" | plim add
# what's tagged #gym
$ plim cat --tag gym
# open it in vim; edits merge with your phone's
$ plim edit "Lisbon trip"
# the whole thing, as a TUI
$ plim

Write it down. Keep it yours.

In any modern browser, on any device. Nothing to install.

Open Plim

Your notes, on every device.Decide how to collaborate with AI agents.