OneTwo NotesThis is a courtesy translation. The German version at onetwonotesPrivacy.html is legally binding.
This privacy policy applies specifically to the OneTwo Notes app (iPhone, iPad and Mac) and supplements the general privacy policy of this website, which covers visiting the website itself.
1. Controller
Christian Drapatz
Kämpenstraße 42
45147 Essen
Germany
Email: support@onetwoapps.com
2. Basic principle: local data processing
OneTwo Notes has no server of the developer, no user account, no sign-in, no advertising, no analytics, no tracking and no AI services. Without iCloud the app works fully offline. The developer receives no content from the app.
3. What data the app stores
What you write is entirely up to you. The app stores your notes with text, checklists, photos, scans, sketches, file attachments and PDFs, plus folders, hashtags, color tags, note links and settings. Notes are stored locally on the device.
4. Text recognition
The text in images and scans is recognized with Apple’s text recognition (Vision) right on your device. Neither images nor recognized text are transmitted to a server for this.
5. Locked notes
You can lock individual notes with a password that you choose yourself. There is no preset password. Text, images and sketches of a locked note are encrypted with AES-GCM (Apple CryptoKit); the key is derived from your password (PBKDF2). This applies on the device and in iCloud too. The note’s name as well as its folder, color tags and pin status stay visible. If you like, you can additionally open locked notes with Face ID or Touch ID. For this the app stores the note key derived from your password in the keychain of this device (only on this device, not in iCloud Keychain); the password itself and note content are never stored there. The biometric check is performed exclusively by the operating system; the developer gets no access to your biometric data, the password or the content. A forgotten password cannot be recovered.
6. iCloud sync (optional)
On first launch the app asks once whether to use iCloud. Sync runs only if your device is signed in to iCloud and iCloud is enabled for the app. Then your notes are synchronized between your Apple devices via the private CloudKit database of your own iCloud account. The transfer runs exclusively through Apple’s infrastructure; the developer has no access to this data. Apple’s privacy terms apply: apple.com/legal/privacy. View settings such as sorting, grouping and filter of the note list are synchronized between your devices through iCloud key-value storage. You can turn note sync on and off per device under Settings › iCloud. Without iCloud or with sync turned off the app works fully locally.
7. Permissions
The app asks for permissions only when you use the matching feature. Camera (iPhone and iPad): to take a photo, scan a document or capture text live. The Mac app never accesses a camera itself; captures from an iPhone or iPad arrive there through macOS Continuity Camera. Photos: to insert an image you chose; the app does not read your photo library as a whole. Face ID or Touch ID: optional, to open a locked note. An internet connection is required for the optional iCloud sync.
8. Widgets, Spotlight, Shortcuts and Siri
Widgets read a snapshot (title, date, text excerpts and small preview images) from a shared app group container on your device; text excerpts and preview images can be turned off in the settings. The “Quick Note” control in Control Center (iPhone and iPad), Spotlight search as well as Shortcuts and Siri (“Create Note”, “Search Notes”) likewise work with data on your device. In widgets, locked notes show only title and padlock, and they are not added to Spotlight.
9. Exports, printing and sharing
Exported, printed or shared notes (RTF, RTFD, PDF) are files under your control. Where you store or send them is up to you. Imports (RTF, text and Markdown files) are read on your device only.
10. Contact by email
If you write to support, I process your email address and the content of your message to answer your request. Please do not send confidential note content or passwords by email.
11. Legal basis
Where personal data is processed, this is done to provide the app functions you request (Art. 6(1)(b) GDPR). For the optional iCloud sync, the note lock and the camera features it is your consent by turning on or using the feature (Art. 6(1)(a) GDPR). Answering support requests is based on Art. 6(1)(b) or (f) GDPR.
12. Disclosure to third parties
Your notes are not disclosed to third parties, except for the technically necessary processing by Apple described above as part of the optional iCloud sync.
13. Your rights
Your notes are on your device or in your own iCloud account; you can view, edit, export and delete them in the app at any time. In addition, you have the rights of access, rectification, erasure, restriction of processing, objection, data portability and the right to lodge a complaint with a data protection supervisory authority, subject to the legal requirements.
14. Last updated
Last updated: October 2026