Private AI Notes
You shouldn't have to choose between AI intelligence and privacy. xNotePadAI gives you both — a powerful AI assistant that helps you write and organise, built on a zero-knowledge foundation where your notes are encrypted before they ever leave your browser.
AES-256-GCM Encryption
Every note is encrypted in your browser before sync. The same standard used by governments and banks — applied to your personal thoughts.
Zero-Knowledge Design
We cannot read your notes. Not our engineers, not our servers, not law enforcement with a warrant. Only your password unlocks the content.
No Tracking, No Cookies
Zero analytics. Zero cookies. Zero telemetry. We don't know who you are, what you write, or when you use the app.
AI with Consent
AI features are opt-in. When you do use them, your data is processed transiently — never stored, never used for training, never shared.
Confidential Sections
Mark parts of your notes as confidential. These sections are excluded from AI processing entirely — an extra layer of control.
Data Stays Local
Your notes live in your browser's localStorage. The app works fully offline. Sync is optional and always encrypted.
How is this different from Evernote AI?
Evernote stores your notes unencrypted on their servers and uses them to train AI features. Their team can read your content. xNotePadAI uses client-side encryption — the server only ever sees ciphertext, making it mathematically impossible for anyone but you to read your notes.
No account needed. Your notes are encrypted the moment you start typing.
Frequently Asked Questions
If my notes are encrypted, how does AI work?
When you request AI help, the relevant content is decrypted locally, sent to the AI model for processing, and the response is returned. The AI interaction is transient — nothing is stored or retained after the request completes.
What happens if I forget my password?
We cannot recover your password or your data. This is intentional — if we could recover it, so could an attacker. Keep your password safe, and consider the Recovery Kit feature for backup.
Is this actually zero-knowledge or just marketing?
It is architecturally zero-knowledge. Encryption uses PBKDF2 (600,000 iterations) to derive a key from your password, then AES-256-GCM to encrypt. The server never sees your password or encryption key. You can verify this in your browser's network inspector.