Privacy Policy

Last updated 12 October 2026

Handwritten notes can hold anything, so JotFrog is built to keep them to you. This policy covers the JotFrog app for macOS and this website. It describes what the app does today. If that changes, this page changes before the app does.

Who we are

JotFrog is made by Rave Nir Piepsh, trading as Altfred, who is responsible for the data described here. For any question or request about your privacy, write to support@jotfrog.com.

Your notes

Everything you make in JotFrog stays in the app's own storage on your Mac: boards, notes, handwriting, images you paste or drop in, stacks, pens, and settings. They live in a database inside the app's container in your user Library. Time Machine backs up that folder like the rest of your Mac.

• Daily snapshots. Once a day JotFrog copies the database into a Snapshots folder beside it and keeps the last seven. They never leave your Mac.
• Backup folder (optional, off by default). If you choose a folder in Settings ▸ Backups, JotFrog also copies each daily snapshot there. If that folder is in iCloud Drive, Dropbox, or a similar service, the copies are uploaded under that service's terms. We never receive them.
• Export. Exported notes are files saved where you choose. What happens to them after that is up to you.

JotFrog has no sync today. If sync is added, it will use your own private iCloud database, which we cannot read, and this policy will be updated before it ships.

Anonymous usage data

To learn whether JotFrog works well on real tablets, the app can send a short record of how it is used. We call this usage data (often called telemetry). It never contains anything you wrote or drew.

When it is sent

• App Store version: off until you agree. At first launch JotFrog asks once and shows exactly what would be sent. If you choose Don't Send, nothing is sent.
• TestFlight beta: on by default, as part of taking part in the beta. You can turn it off.

You can change your choice at any time with Send anonymous usage data in JotFrog ▸ Settings ▸ Privacy. When you turn it off, anything still waiting to be sent is deleted from your Mac at once, and nothing more is sent.

What is sent

Only these events, each with the time it happened and a random event number so that a batch sent twice is counted once:

• launches, with the app and macOS versions
• when a session starts, and when it ends with how long it ran
• how notes are made (by dragging, clicking, a shortcut, or the quick note)
• when Settings opens
• when a menu opens, and which kind (the menu bar, the menu bar icon, or a right-click menu), never which item
• uses of Focus Mode
• the app's own timing from pen to screen: three summary figures in milliseconds (typical, slow, and slowest) and how many frames they cover
• which tablet drivers are installed (Wacom, Huion, or XP-Pen) and their version numbers, never the tablet itself
• how images are put on paper (paste, drop, or menu)

Each batch also carries a random install ID, the app's version and build number, whether it is a beta, and the macOS version.

What is never sent

• your ink, your images, or pictures of either
• how many notes a board has
• note or stack names
• device serial numbers
• file paths or file names
• your name, email, Apple Account, or any account. JotFrog has none.

The install ID

The install ID is a random number made by the app the first time it runs. It is not derived from your Mac, your tablet, or your Apple Account, and it is the only thing that ties one batch to the next. Settings ▸ Privacy shows its first characters. Reset Install ID replaces it with a new random one, so later data cannot be linked to earlier data.

Where it goes and how long it is kept

Usage data is sent over an encrypted connection to jotfrog.com, which runs on Cloudflare. Our collector does not store IP addresses. Cloudflare handles the connection as our hosting provider and processes your IP address only to deliver the request (see Cloudflare's privacy policy).

We keep raw events for 13 months and then delete them. After that we may keep only totals that are not tied to any install ID, such as how many sessions there were in a week.

If the app cannot reach the collector, events wait on your Mac in a small file of at most 500 events, then are sent later or dropped, oldest first.

Why

We use usage data only to make JotFrog better: to check that writing stays fast, to see which tablets and drivers work, and to learn which features people use. The legal basis is your consent, which you can withdraw at any time in Settings.

Subscriptions and purchases

Apple sells JotFrog's subscription through the App Store, and Apple's privacy policy covers that purchase. We never receive your payment details, your name, or your Apple Account. The app asks Apple on your Mac whether a subscription is active and keeps the answer there so it also works offline. Your subscription status is not part of usage data. Apple gives us sales reports with totals, not individuals.

Crash reports

JotFrog has no crash reporter of its own. If you allow it in System Settings ▸ Privacy & Security ▸ Analytics & Improvements (Share with app developers), or if you are in the TestFlight beta, Apple passes crash reports for JotFrog on to us. They describe where the app stopped and on which Mac model and macOS version. They do not contain your notes.

When you contact us

If you email us, we use your message and address only to reply, and we delete them on request. The Pen Check text that JotFrog lets you copy into a report holds your tablet's model and what it reports, but no pen positions and no serial numbers, and it reaches us only if you paste it into a message.

Feedback and screenshots sent through TestFlight reach us through Apple. Beta testers may also be asked to send a copy of their notes to help us test updates. That copy contains your notes, so it is sent only if you choose to send it. We use it only to check that updates open it correctly, keep it private, and delete it when testing is done or when you ask.

This website

jotfrog.com has no cookies, no analytics, and no trackers. Cloudflare serves it and may process your IP address to deliver and protect the site.

Sharing

We do not sell or rent data, show ads, or share data with advertisers. The only other parties involved are Cloudflare, which hosts the site and the collector, and Apple, which runs the App Store, TestFlight, and crash reporting. Beyond that, we would disclose data only if the law required it.

Children

JotFrog is not aimed at children, and it collects nothing that identifies anyone at any age.

Your rights

Depending on where you live, including under the GDPR in the EU and UK, you have the right to see the data we hold about you, to have it corrected or deleted, to withdraw consent, and to complain to your data protection authority.

The only data we hold about a user is the usage data linked to an install ID. To see it or delete it, email support@jotfrog.com with the install ID from Settings ▸ Privacy, and we will send it to you or delete every event carrying it. Turning usage data off or resetting the install ID also stops anything new from being linked to you.

Changes

If this policy changes, the date at the top changes too. Changes that affect what the app sends will appear in the app's release notes before they take effect.