📝 NOTES
Your thoughts belong to you.
Not to a cloud company. Not to an advertiser. Not to a government.
To you — and only you.
To you — and only you.
Every note you write on Notion, Google Docs, Apple Notes, or Evernote is stored in plaintext on someone else's server. Their engineers can read it. Their legal team can hand it to governments. Their algorithms can scan it to sell you something. Your thinking is their product.
HOW OIO NOTES WORKS
🔐
Encrypted before it leaves your screen
Your note is encrypted with AES-256-GCM using your OIO KEY — a key that only you possess.
The encrypted blob is what gets stored. We never see the plaintext.
Not us, not IPFS nodes, not anyone.
📦
Stored on IPFS — content-addressed, permanent
The encrypted note is uploaded to IPFS. It receives a CID — a cryptographic fingerprint.
No central server owns it. No company can delete it.
Even if OIO.SO disappears tomorrow, your CID stays on the network.
⏳
Live text expires in 72 hours
After 72 hours, the plaintext is wiped from our database. Only the CID remains —
a pointer to your encrypted note on IPFS. To read it again, press Restore.
Your OIO KEY decrypts it locally. Minimum footprint. Maximum control.
📅
Restore any note by date
Your archive shows every note by date. Press Restore — we fetch the encrypted blob from IPFS,
decrypt it with your key, and load it back into your editor.
Like a private time machine for your thoughts.
WHO THIS IS FOR
→
Activists and journalists — keeping notes that should never reach hostile governments
→
Founders and builders — product ideas, strategy, thinking that should not be readable by cloud providers
→
Researchers and writers — drafts, references, and raw thinking that is not ready for the world
→
Anyone who values privacy — because private thinking is a prerequisite for free thinking
OUR POSITION
→ We cannot read your notes — AES-256 ensures this technically, not just by policy
→ We cannot hand your notes to anyone — we do not have the plaintext
→ We cannot delete your notes — they exist on IPFS independent of us
→ You can verify this — the code is inspectable, the encryption is standard
→ Privacy is not a setting — it is the architecture
TECHNICAL STACK
Encryption
AES-256-GCM
Key derivation
SHA-256(OIO KEY)
Storage
IPFS (content-addressed)
DB footprint
CID + timestamp only
Live text TTL
72 hours
Note limit
2,000 characters