WIP Notes stores all user data on the user's Mac, in the user's control, at all times. There is no cloud component to assess — that's the whole security model.
All notes, attachments, and settings are stored in a SQLite database in the user's home directory (~/Library/Application Support/). Data never leaves the device unless the user exports it.
Data is protected by macOS user-account permissions and is included in the user's own backup regime (Time Machine or equivalent). Full-disk encryption via FileVault applies when enabled.
Uninstalling the app leaves data removal entirely in the user's hands — nothing persists anywhere else, because nothing exists anywhere else.
Normal operation: zero network requests. No sync, no update pings, no crash reporting, no analytics. This is verifiable with any outbound firewall (e.g., Little Snitch).
Single exception: one-time license-key activation at purchase contacts the payment provider's license API, then stores a cached offline license file. No note content or personal data is included; after activation the app runs indefinitely offline.
The optional MCP server (wip-notes-mcp) runs as a local process on the user's Mac and reads the same local database.
It allows locally installed AI assistants (e.g., Claude Desktop) to search and read notes. WIP Notes itself sends nothing to any AI service. What a user's separately installed assistant does with retrieved text is governed by that assistant's own policies — organizations can simply not install the MCP server; the app is fully functional without it.
No API keys are stored or required by WIP Notes.
Distributed as a signed and notarized DMG (Apple Developer ID), verified by macOS Gatekeeper.
Updates are manual and user-initiated — the app never phones home to check for updates, and no auto-update mechanism runs in the background.
Personal data collected by the app: none. No account, no identifiers, no usage data. There is no data for Intique Software to breach, sell, or subpoena.
Purchase records (name, email, payment) are held by our merchant of record, Lemon Squeezy, under their compliance program; Intique Software never sees card data.
Because no user data is transmitted or hosted, cloud-security frameworks (SOC 2, FedRAMP) do not apply — there is no service to certify. The relevant controls are your organization's existing endpoint controls, which WIP Notes inherits fully.
Perpetual license, one-time payment. No subscription, no renewal risk, no vendor-hosted dependency that can be discontinued.
Questions from your security team are welcome.
Email dev@intiquesoftware.com