Nolio vs PrivacyNotes

Nolio is a free, open-source notes app that stores encrypted notes locally, without cloud storage, third-party servers, or telemetry. Each note is encrypted with AES-256-GCM; key derivation uses Argon2id or a 600,000-iteration PBKDF2 fallback. The master password is essential: the maker says notes cannot be recovered without it and there is no password reset. The vault can lock after a configurable idle period or through Cmd/Ctrl + Shift + L. Its editor supports headings, lists, task lists, quotes, code blocks, callouts, tables, images, and links. Pasted Markdown is converted into rich blocks, and slash commands insert blocks from the keyboard. Notes can be organized into nested pages with unlimited subpages, alongside Favorites, Recent, All Notes, Trash, and a command palette. Desktop users can open resizable sticky-note windows and pin them above other windows. Encrypted backups can be exported to a chosen location, and imports verify the backup password before writing data. Nolio runs in a browser and on Windows, macOS, Linux, and Android.

PrivacyNotes is an end-to-end encrypted workspace for notes, tasks, files, a vault, journals, and bookmarks. It encrypts notes on the device before synchronization using XChaCha20-Poly1305, with keys derived from a 12-word BIP-39 phrase. Its local-first design supports reading, writing, and searching offline, then syncs changes when connectivity returns. The synchronized copy is stored in Zurich, Switzerland, as encrypted data rather than readable note text. Users can create a vault without email or sign in with Google, Apple, or GitHub; provider sign-in offers server-held or device-only key custody. Imports cover many note, journal, password, and bookmark services, along with Markdown files. PrivacyNotes has no AI features or background AI processing and does not train models on user content. Its web, desktop, and mobile apps and encryption code are published on GitHub under the AGPL. The Free plan costs nothing forever; Pro costs $48, paid once. Under self-custody, losing the phrase without a signed-in device means the company cannot recover notes.