Privacy and your data

Your dataCopy Anchor Link

• Local SQLite. Your notes, folders, tags and version history live in one SQLite database on your Mac, with attachments next to it. Kajero works offline.
• Markdown out. Export a note, a folder or a workspace as Markdown files with their attachments, from the app or with kajero export. Exported files carry tags, created and updated as front matter, and links between exported notes become relative links. Whiteboards export as standard Excalidraw files.
• Markdown in. Import a folder of Markdown files, such as an Obsidian vault.
• Backups. Settings › General shows the last backup and has Back up now and Show in Finder.
• Version history. Every editing session writes a revision, and one is always written before an AI or agent change. Each revision records who made it: user, ai, or agent:<client>. You can view a revision, compare it with the current text and restore it. Agent activity lists every change by AI and external agents, with a diff and a one-click revert. Deletes by agents are soft.

No account, no telemetryCopy Anchor Link

• Kajero needs no account.
• The app sends no telemetry by default.
• There is no Kajero server in the middle of your notes.

This website is separate from the app and may use privacy-friendly analytics; see the privacy policy.

What goes to your AI providerCopy Anchor Link

Notes leave your Mac only when a feature sends them to the AI provider you connected. That is the text a feature needs, not your library: the paragraph for inline AI, the notes a question or chat needs. Kajero shows which notes it sent to which provider. With a local model in Ollama, nothing leaves your Mac. What the provider does with the text is governed by your agreement with them.

Note content is treated as data, never as instructions. Tools that delete, move across workspaces or touch many notes always ask you first in the app.

Keys and the appCopy Anchor Link

• API keys are encrypted with macOS safeStorage and readable only by the app's main process. Settings never shows a stored key again.
• The app window runs with Electron's context isolation and sandbox and without Node integration. Every call between window and main process is validated.
• The build is signed with a Developer ID and notarized, and is distributed outside the Mac App Store.
• Kajero is open source under AGPL-3.0.

Agents and your workspacesCopy Anchor Link

External agents reach your notes only through the kajero command and only in workspaces you grant per invocation. See CLI and MCP.