Privacy Policy
This policy describes the Novara desktop application for Windows. The official website (novara.xin) and the GitHub repository are separate properties; this document focuses on the software you install and run on your machine.
TL;DR
- Novara is 100% local. Your data stays on your computer and never leaves it unless you explicitly make it leave.
- We collect nothing. No account, no telemetry, no usage analytics, no ads, no device fingerprinting.
- It works fully offline. The only network activity is the API-key detection you trigger manually (Section 5), and the local MCP interface you opt into (Section 6).
- Encryption is optional and OFF by default. Read Section 4 carefully so you know exactly what is and is not protected.
1. What Novara is
Novara is a local-first personal knowledge manager for Windows, built with C# and WinUI 3. It combines memos, file-path bookmarks, to-do lists, sticky notes, and rich-text records into a single database stored entirely on your own device.
There is no cloud backend, no account system, and no server operated by the Novara project that could receive your data. The application is designed to be fully functional with no internet connection at all.
2. What we collect: nothing
The Novara application does not collect, transmit, or store on any remote server:
- your notes, passwords, records, to-do items, or any content you create;
- your identity, name, or email address (there is no registration);
- usage statistics, feature-usage logs, or behavioral analytics;
- device information, hardware identifiers, or crash reports (see Section 8);
- your IP address or network activity.
Because everything is processed and stored on your own machine, the developer has no technical ability to see, read, or access your data.
3. Where your data lives
All Novara data is written to a single local directory:
%LocalAppData%\Novara\Development builds: test/development builds use
%LocalAppData%\Novara-Dev\instead, so test data never mixes with your installed release.
Files in that directory include:
| File | Purpose |
|---|---|
data.novadb | Your entire database (memos, paths, to-dos, notes, records, settings) as a single file |
security.dat | Only salted hashes of your lock password (never the password itself) |
lockout.dat | Lockout state after repeated wrong passwords |
language.dat | A plain-text hint of your selected interface language |
stickies.json | Data used to synchronize desktop sticky notes with the helper process |
backups\ | Rolling local snapshots created by the built-in backup feature |
logs\ | Local log files (see Section 8) |
Nothing in this directory is uploaded anywhere. Deleting this directory (or using the in-app "Reset" function) removes your data.
4. Encryption — read this carefully
Encryption in Novara is optional and turned OFF by default.
- Default state: your database is stored as a plaintext JSON file on your local disk. It is protected by the Windows user account's file permissions, but it is not encrypted unless you enable the privacy lock.
- When you enable the privacy lock: the entire database is encrypted with AES-256-GCM (authenticated encryption). The key is derived from your password using PBKDF2-SHA256 with 100,000 iterations and a per-user random salt.
- Password: the lock password is 6 to 64 characters. Only salted SHA-256 hashes are stored locally — the plaintext password is never written to disk.
- Windows Hello (since 5.0): you can optionally unlock with Windows Hello biometrics or PIN. Your biometric data is never stored or transmitted; the check is delegated to the Windows Hello subsystem.
- No backdoor, no recovery: there is deliberately no way to recover a forgotten password. If you forget it, the only option is to erase the database and start over.
- Brute-force protection: after 5 consecutive wrong passwords, unlocking is blocked for 30 minutes, persisted across restarts and using a monotonic clock.
- Upgrade path: databases created by Novara 2.0 used an older AES-CBC format. Novara 3.0 and later can read and migrate them to the GCM format after one confirmation.
What encryption does and does not protect: see the Security Policy for the full threat model. In short, encryption protects your data at rest. It does not protect data already unlocked in memory, nor against malware, keyloggers, screen capture, or physical access to your unlocked machine.
5. Network behavior — API-key detection
Novara is designed to be fully usable offline and does not phone home.
- No automatic updates: Novara does not check for, download, or install updates on its own.
- No telemetry or analytics: the application never contacts any server owned by the Novara project.
- The only network feature: the API-key detection in the memo manager, with three tiers you trigger explicitly.
The three detection tiers
Some memo entries are of type "API Key". Right-clicking such an entry lets you run, against the endpoint URL you configured for that entry:
| Tier | What it sends | Token cost |
|---|---|---|
| Connectivity test | A GET to a models-list path such as /v1/models, including that entry's API key | 0 |
| Status diagnosis | Minimal chat requests to infer balance presence, read metadata, and measure latency | 1–3 |
| Relay probe | Randomized test prompts to check model identity, capability, billing, and more | tens–hundreds |
All three send data only to the third-party endpoint you configured — never to the Novara project. Any tier that consumes tokens requires a separate confirmation before it runs. Your key is masked in the UI and never written to logs or reports.
If you do not use this feature, Novara makes zero network requests.
6. MCP Agent interface — read this carefully
Since 5.0, Novara can expose a local MCP server so an AI agent can read and write your cards. This is an opt-in feature, disabled by default.
- Novara itself stays offline. The MCP server is a local process talking to the running Novara app over a local named pipe. It makes no network requests and sends nothing anywhere by itself.
- Access control. The interface is gated by a token you set, a per-process authorization whitelist, and the database-unlock state. Deletion has its own separate permission.
- Sensitive-field redaction. Password, key, and token fields are read back as
****and excluded from search results.
The one thing to understand about cloud AI. The MCP server never transmits your data. However, if you connect a cloud-hosted AI assistant, whatever that assistant reads from Novara may be sent by that AI client to the AI provider you chose — controlled by the AI app, not by Novara. If you use a local model, nothing leaves your machine. Please check the privacy policy of any AI client before granting it access.
7. What Novara accesses on your device
- Its own data directory (
%LocalAppData%\Novara\, orNovara-Devfor development builds) — reads and writes only here. - Files/folders you choose — the "path backup" feature checks whether your registered paths exist and opens them in File Explorer when you click. It does not scan your whole disk.
- File/folder pickers — used when you create or edit a path entry.
- A local named pipe — used only by the optional MCP interface to receive tool calls from
NovaraMCP.exeon the same machine. - Windows registry (current user only,
HKCU) — a few small, user-scoped entries for optional features (auto-start, right-click menu), removed when you disable the features or uninstall.
Novara does not request or use: camera, microphone, location, contacts, or any network permission beyond the explicit detection described in Section 5.
8. Logs and diagnostics
- Logs are local only. They are never sent to the developer or any third party.
- Crash logs may be written to local files under
%LocalAppData%\Novara\logs\. Sensitive values (e.g. API keys) are redacted. - The desktop-sticky-note helper process writes its own log file (
sticknotehost_debug.txt). - There is no automatic diagnostic reporting. Nothing is transmitted without your action.
9. Third-party components
| Component | Role | Data note |
|---|---|---|
| WinUI 3 / Windows App SDK 1.6 | UI framework | Local; no data collection by Novara |
| .NET 8 | Runtime | Local |
| WebView2 (Edge Chromium) | Hosts the records editor | A Microsoft component; may keep its own local runtime data. The editor runs offline (engine bundled, no CDN). |
| H.NotifyIcon | System-tray icon | Local |
| Tiptap | Rich-text editor engine | Bundled as a local script, runs offline |
| markdown-it | Markdown rendering | Bundled as a local script, runs offline |
| AngleSharp | HTML sanitization | Local; strips unsafe content from pasted HTML |
Novara does not embed advertising SDKs, analytics SDKs, or any third-party tracking code.
10. Data sharing
Novara does not share, sell, rent, or transmit your data to any third party. There is no business model that involves your data.
The only data that can ever leave your machine is data you send yourself:
- the API-key detection (to the endpoint you configured, only on your explicit action),
- data an AI agent reads and sends via a cloud AI client you chose (see Section 6), and
- files you explicitly export or back up to a location you choose.
11. Your control over your data
- Export (native) — a complete plaintext backup (
.novabak) with an MD5 integrity header. Note: exported files are NOT encrypted. - CSV export/import — export memos as CSV, or import CSV from Novara, KeePass, or Bitwarden formats.
- PDF / HTML collection — export all records as a printable HTML or PDF collection.
- Markdown export — export records as Markdown, with or without images.
- Backup snapshots — up to 10 rolling local snapshots you can restore from.
- Import / restore — with validation, normalization, and rollback.
- Recycle bin — deleted cards are recoverable for 7 days.
- Reset / delete — the in-app "Reset" wipes the database.
- Privacy lock — enable, change, or disable encryption at any time.
- MCP interface — enable/disable, rotate token, and manage the process whitelist at any time.
12. What we will never do
- We will never operate a cloud server that collects your data.
- We will never add telemetry, analytics, or ads.
- We will never add a backdoor, a password-recovery bypass, or any remote unlock/exfiltration mechanism.
- We will never auto-update, auto-upload, or otherwise move your data without an explicit action from you.
13. Children's privacy
Novara does not collect any personal information from anyone, including children. Because the application is local-only and collects nothing, no special children's-privacy provisions apply.
14. Changes to this policy
This policy may be updated as the application evolves. Updates will be published alongside new releases. An updated policy applies from its effective date and does not affect the data already stored on your device.
15. Contact
- Email: owner@novara.xin
- Website: https://novara.xin
- GitHub: https://github.com/Novara-owner/Novara-Vault
隐私政策
本政策描述的是 Novara 桌面应用（Windows 版）。官方网站（novara.xin）与 GitHub 仓库为独立资产；本文档仅针对你安装并运行在本机上的软件。
TL;DR
- Novara 100% 本地化。 你的数据保存在你自己的电脑上，除非你主动让它离开，否则绝不会离开。
- 我们不收集任何东西。 没有账号、没有遥测、没有使用统计、没有广告、没有设备指纹。
- 完全可离线使用。 唯一的网络活动是你手动触发的 API Key 检测（第 5 节）与你主动开启的本地 MCP 接口（第 6 节）。
- 加密是可选的，且默认关闭。 请仔细阅读第 4 节。
1. Novara 是什么
Novara 是一款面向 Windows 的本地优先个人知识管理工具，使用 C# 与 WinUI 3 构建。它将备忘、文件路径书签、待办清单、桌面便签与富文本记录整合进一个完全存储在你本机上的数据库文件。
Novara 没有云后端、没有账号体系，也不存在任何由 Novara 项目运营、可能接收你数据的服务器。应用被设计为在完全无网络连接的情况下也能完整使用。
2. 我们收集什么：什么都不收集
Novara 应用不会收集、传输，也不会存储到任何远程服务器：
- 你的笔记、密码、记录、待办项或你创建的任何内容；
- 你的身份、姓名或邮箱地址（无需注册）；
- 使用统计、功能使用日志或行为分析；
- 设备信息、硬件标识符或崩溃报告（见第 8 节）；
- 你的 IP 地址或网络活动。
由于一切都在你自己的机器上处理与存储，开发者在技术上无法查看、读取或访问你的数据。
3. 你的数据存放在哪里
Novara 的所有数据都写入一个本地目录：
%LocalAppData%\Novara\开发构建：测试/开发版改用
%LocalAppData%\Novara-Dev\，避免测试数据与你已安装的正式版混在一起。
该目录中的文件包括：
| 文件 | 用途 |
|---|---|
data.novadb | 你的整个数据库（备忘、路径、待办、便签、记录、设置）——单一文件 |
security.dat | 仅保存你锁定密码的加盐哈希（绝不保存密码明文） |
lockout.dat | 多次输错密码后的锁定状态 |
language.dat | 你选择的界面语言的纯文本提示 |
stickies.json | 主程序与桌面便签辅助进程之间同步的数据 |
backups\ | 内置备份功能生成的滚动本地快照 |
logs\ | 本地日志文件（见第 8 节） |
该目录中的任何内容都不会被上传。删除该目录（或使用应用内「重置」功能）即会删除你的数据。
4. 加密——请仔细阅读
Novara 的加密是可选的，且默认关闭。
- 默认状态：数据库以明文 JSON 文件形式存储在你本地磁盘上，受 Windows 用户账户权限保护，但在你开启隐私锁之前并未加密。
- 开启隐私锁后：整个数据库使用 AES-256-GCM（认证加密）加密，密钥由你的密码经 PBKDF2-SHA256（100,000 次迭代） 与每用户随机盐派生。
- 密码：锁定密码长度为 6 到 64 个字符。本地只保存密码的加盐 SHA-256 哈希。
- Windows Hello（5.0 起）：可用 Windows Hello 生物识别或 PIN 解锁，生物特征数据绝不存储或传输。
- 无后门、无找回：刻意不提供找回密码的途径。忘记密码只能清空数据库重新开始。
- 防暴力破解：连续输错 5 次锁定 30 分钟，跨重启持久化并使用单调时钟。
- 升级路径：Novara 2.0 的旧 AES-CBC 数据库，3.0 及更高版本可在一次确认后迁移到 GCM 格式。
加密能保护什么、不能保护什么：完整威胁模型见安全说明。简言之，加密保护的是你「静态」的数据，不保护已解锁内存中的数据，也无法防御恶意软件、键盘记录、截屏或物理接触。
5. 网络行为——API Key 检测
Novara 被设计为可完全离线使用，不会回连服务器。
- 无自动更新：Novara 不会自行检查、下载或安装更新。
- 无遥测或分析：应用绝不会联系任何由 Novara 项目运营的服务器。
- 唯一的联网功能：备忘管理中的 API Key 检测，提供三个由你显式触发的入口。
三个检测入口
部分备忘条目类型为「API Key」。右键此类条目，可针对你自己为该条目配置的端点 URL 运行：
| 入口 | 发送内容 | Token 消耗 |
|---|---|---|
| 接口连通检测 | 向模型列表路径（如 /v1/models）发送 GET 请求，携带该条目的 API Key | 0 |
| 接口状态诊断 | 最小对话请求，推断有无余额、读取元数据、测量延迟 | 1–3 |
| 中转站探针检测 | 随机化测试提示，校验模型真伪、能力、计费等 | 数十~上百 |
三者都只发往你自行配置的第三方端点——绝不发往 Novara 项目。任何消耗 token 的检测都会在运行前再次确认。你的 Key 全程掩码，绝不写入日志或报告。
如果你不使用此功能，Novara 产生的网络请求为零。
6. MCP Agent 接口——请仔细阅读
自 5.0 起，Novara 可以暴露一个本地 MCP 服务器，让 AI 助手代你读写卡片。这是可选功能，默认关闭。
- Novara 自身保持离线。 MCP 服务器是本地进程，通过本地命名管道与运行中的 Novara 主程序通信，自身不产生任何网络请求。
- 访问控制。 接口由令牌、进程白名单与数据库解锁状态共同把关，删除操作另有独立权限。
- 敏感字段脱敏。 密码、密钥、token 字段读出为
****，且不参与搜索结果。
关于云端 AI 必须理解的一点。 MCP 服务器本身绝不传输你的数据。但如果你接入的是云端托管的 AI 助手，该助手从 Novara 读到的内容可能被那个 AI 客户端发往你所选的 AI 服务商——由 AI 客户端控制，而非 Novara。如果你使用本地模型，则没有任何东西离开你的电脑。请在授权前查看你所接入的 AI 客户端的隐私政策。
7. Novara 会访问你设备上的什么
- 它自己的数据目录（
%LocalAppData%\Novara\，开发构建为Novara-Dev）——只在这里读写。 - 你自行选择的文件/文件夹——「路径备份」功能只检查你登记的路径是否存在，并在点击时打开。它不会扫描整个磁盘。
- 文件/文件夹选择器——创建或编辑路径条目时使用。
- 本地命名管道——仅用于可选 MCP 接口，接收同一机器上
NovaraMCP.exe的工具调用。 - Windows 注册表（仅当前用户
HKCU）——少量用户级可选功能项（开机自启、右键菜单），关闭功能或卸载时移除。
Novara 不会请求或使用：摄像头、麦克风、位置、通讯录，或除第 5 节所述检测之外的任何网络权限。
8. 日志与诊断
- 日志仅保存在本地，绝不会发送给开发者或任何第三方。
- 崩溃日志可能写入
%LocalAppData%\Novara\logs\下的本地文件，敏感值（如 API Key）已脱敏。 - 桌面便签辅助进程会写入自己的日志文件（
sticknotehost_debug.txt）。 - 不存在自动诊断上报，未经你的操作，任何内容都不会被传输。
9. 第三方组件
| 组件 | 作用 | 数据说明 |
|---|---|---|
| WinUI 3 / Windows App SDK 1.6 | UI 框架 | 本地；Novara 不做数据收集 |
| .NET 8 | 运行时 | 本地 |
| WebView2（Edge Chromium） | 承载记录编辑器 | 微软组件；编辑器离线运行（引擎内置，无 CDN）。 |
| H.NotifyIcon | 系统托盘图标 | 本地 |
| Tiptap | 富文本编辑器引擎 | 作为本地脚本打包，离线运行 |
| markdown-it | Markdown 渲染 | 作为本地脚本打包，离线运行 |
| AngleSharp | HTML 净化 | 本地；剥离粘贴内容中的不安全 HTML |
Novara 不嵌入任何广告 SDK、分析 SDK 或第三方追踪代码。
10. 数据共享
Novara 不会共享、出售、出租或传输你的数据给任何第三方。不存在任何涉及你数据的商业模式。
唯一可能离开你机器的数据，是你自己发送的数据：
- API Key 检测（只在你显式操作时发往你配置的端点），
- AI 助手读取后经你选择的云端 AI 客户端发送的数据（见第 6 节），以及
- 你主动导出或备份到你选择位置的文件。
11. 你对数据的控制权
- 导出（原生格式）——带 MD5 完整性头的完整明文备份（
.novabak）。注意：导出的文件未加密。 - CSV 导出/导入——导出备忘为 CSV，或从 Novara、KeePass、Bitwarden 格式导入。
- PDF / HTML 合集——将全部记录导出为可打印的 HTML 或 PDF 合集。
- Markdown 导出——记录导出为 Markdown，可含 / 不含图片。
- 备份快照——最多 10 份可恢复的滚动本地快照。
- 导入 / 恢复——带校验、归一化与回滚。
- 回收站——删除的卡片 7 天内可恢复。
- 重置 / 删除——应用内「重置」清空数据库。
- 隐私锁——随时开启、更改或关闭加密。
- MCP 接口——随时开启/关闭、轮换令牌、管理进程白名单。
12. 我们永远不会做的事
- 我们永不运营收集你数据的云服务器。
- 我们永不加入遥测、分析或广告。
- 我们永不加入后门、密码找回后门，或任何远程解锁/窃取数据的机制。
- 我们永不在未经你显式操作的情况下自动更新、自动上传或以其他方式移动你的数据。
13. 儿童隐私
Novara 不收集任何人的任何个人信息，包括儿童。由于应用完全本地化、不收集任何信息，因此不适用特殊的儿童隐私条款。
14. 本政策的变更
随着应用演进，本政策可能更新。更新将随新版本一同发布。更新后的政策自其生效日期起适用，不会影响已存储在你设备上的数据。