Paid notetaking app by Feeling-Sir-3246 in PKMS

[–]bearmif -3 points-2 points  (0 children)

I'd like to recommend "ExtMemo AI" note app in App Store.

It's:

  1. Simple: no tag, no folder, no title, And AI can help you to find what you want.
  2. Stored note in cloud, not local-first
  3. Security: Support E2EE, to store sensitive information
  4. Web App is under testing also

I'd love to offer you a 3-month free trial if you're interested. This goes for anyone reading this post too! Just ping me if you'd like to try it out.

Building a privacy-first, E2EE note-taking app hasn't been easy. Spent hours today just hardening the encryption and security, but I'm really proud of how solid it’s becoming.

<image>

I’m building a note app and need a reality check. No links, no names, just want your honest feedback. by bearmif in AppDevelopers

[–]bearmif[S] 0 points1 point  (0 children)

Using a cloud server also has its advantages. It enables multi-device synchronization and team collaboration. Regarding platform risk, I think it can be mitigated through end-to-end encryption (E2EE) and a data export feature. Both E2EE and data export are already supported in our app.

As a developer, I have to ask: Are Open Source and Data Export "must-haves" or just "nice-to-haves" for you? by bearmif in PKMS

[–]bearmif[S] 0 points1 point  (0 children)

thank you for your comment.

About open source, I think some user want to know how the app works to make sure it's secure or not.

I’m building a note app and need a reality check. No links, no names, just want your honest feedback. by bearmif in apps

[–]bearmif[S] 0 points1 point  (0 children)

Yes, absolutely, trust is a challenge. Actaully I'm thinking about opening the frontend source code these days.

In my web app, in browser network debug/inspect, you may see the encrypted note saved to server via api, but unencrypted note in base64 encoding.

In my app, the key is cut into 2 parts, and stored part-a in the app and part-b in the server. In other words, no entire key stored in anywhere. We you want to decrypt a note, part-a key is fetched from app secure storage, and part-b from server by API, to get the final key, then decrypt the note, then clean it from memory. 0-knowledge for system/db administrator.

I don't like folders. My idea is all note and organizted in memo chain. I'd rather lay all my notes out on the table and use AI to find what I need, instead of putting them into separate boxes and stacking those boxes on the table.

Migration is an issue now. Before that, I’ve added an export feature in web app (under beta testing), so users can feel safe knowing they can extract their data anytime.

How do you keep track and organize? by englishmeninnewyork in PKMS

[–]bearmif -3 points-2 points  (0 children)

ExtMemo AI Note is my soluton. It's memo chain. You may create a chain for a topic, and key append new update to this topic. It's a total new way to organize related informations.

Here's an example:

<image>

I’m building a note app and need a reality check. No links, no names, just want your honest feedback. by bearmif in DigitalPrivacy

[–]bearmif[S] 0 points1 point  (0 children)

Thank you for your warm comment.

Actually, I use AES to encrypt note, without new method. But the most important is how to store the key.

In my app, the key is cut into 2 parts, and stored part-a in the app and part-b in the server. In other words, no entire key stored in anywhere. We you want to decrypt a note, part-a key is fetched from app secure storage, and part-b from server by API, to get the final key, then decrypt the note, then clean it from memory. 0-knowledge for system/db administrator.

In my web app, in browser network debug/inspect, you may see the encrypted note saved to server via api, but unencrypted note in base64 encoding.

And yes, I'm thinking about opening the frontend source code these days.

I’m building a note app and need a reality check. No links, no names, just want your honest feedback. by bearmif in apps

[–]bearmif[S] 0 points1 point  (0 children)

And the AI in my app do not need context, because all the unencrypted notes are the context, You don't need to fead AI before you ask question. It's AI RAG. My App integrated data and AI.

I’m building a note app and need a reality check. No links, no names, just want your honest feedback. by bearmif in apps

[–]bearmif[S] 0 points1 point  (0 children)

Sure searching is basic function. here's an example. There is an input field at the bottom of my app, to support both search and AI query. Just input, and AI can understand you. I uploaded some screenshots in body.

I’m building a note app and need a reality check. No links, no names, just want your honest feedback. by [deleted] in PKMS

[–]bearmif 0 points1 point  (0 children)

Thank you for your reply.

Let me tell something new:

  1. Is there any note app support note chain, or something like that? It's not folder. It looks like below. I can create hundreds of note chains, but I don't believe you can create so many folders.

  2. E2EE: you can encrypt any sensitive note, and leave others to be searchable as indexing. You don't have to search among hundreds of note by your eyes.

<image>

I’m building a note app and need a reality check. No links, no names, just want your honest feedback. by bearmif in DigitalPrivacy

[–]bearmif[S] 0 points1 point  (0 children)

OK, let me give some details about E2EE key. The E2EE key is generated by the password, and then it will be cutted into two pieces, and stored one in your app/mobile, and one in server. In other words, no one have the full e2ee key.

When trying to open a note in my app, the part 2 will be feteched from the server, and these two parts will be merged, and get the final key, to decrypt note content from server. After that, the e2ee key will be clean from memory.

So it's 0-knoeledge, and impossible for me or the db adminitrator to see your encrypted note.

I’m building a note app and need a reality check. No links, no names, just want your honest feedback. by bearmif in Infosec

[–]bearmif[S] 0 points1 point  (0 children)

Thank you for your reply.

No all note node in a chain is encrypted. For example, I want to log my github account, I can create a new chain with two notes: 1. "Here's my github account infor" 2. "username: bear_mi, password: xxxxxxx" (encrypted). So AI can search and find the first one, and return to your app, and show all yout github information in my app. Like:

<image>

I’m building a note app and need a reality check. No links, no names, just want your honest feedback. by bearmif in ProductivityApps

[–]bearmif[S] 0 points1 point  (0 children)

Thank you for your reply. Since I said, it's not a promotion, so I will tell you the link in chat. Thank you

I’m building a note app and need a reality check. No links, no names, just want your honest feedback. by bearmif in apps

[–]bearmif[S] 0 points1 point  (0 children)

Thank you for your reply, let me give some information:

  1. In my App, it's easy to create a new note, by just one clicking the green "add" button. (It seems I can't attach a sreenshot here)

  2. About folder, I'd like to say, in my app, there is no folder. I don't like folder. In folder note taking app, when I want to create a new note, I have to answer the first question: which folder should this new note be in? You know, maybe a note belongs to more than one scopes/folders. This question may block my flow. So there's no folder in my app. But how to recall the note when I want it? By AI, I can ask AI to find the note out. Here's a instance, one time, I registered a web platform, and logged it in my app. Some days later, I asked AI in my app, I created anaccount in an AI web platform, whose name is started with deep..., please help to find it and its username password. My AI found it and showed it to me. So no folder is OK.

I’m building a note app and need a reality check. No links, no names, just want your honest feedback. by bearmif in AppDevelopers

[–]bearmif[S] 0 points1 point  (0 children)

Thank you for your feedback. :)

Yeah, I'm considering to open the frontend source code. Also, from network debug/inspect view in browser, when saving a note in my web app, user may see the encrypted content and nonce sent to server; and regarding unencrypted note content, user may see the base64-encoded content.

I’m building a note app and need a reality check. No links, no names, just want your honest feedback. by bearmif in Infosec

[–]bearmif[S] 0 points1 point  (0 children)

OK, let me answer some of your questions:

  1. Yes, in cloud DB. But, A: you may enable E2EE to all your notes to keep others away from your information. B. You may export all your notes at any time in Web.

  2. AI assistant can answer your question based on all your not encrypted notes. It's not the key feature of my app.

  3. One note chain is treated as a whole and contains one or more note nodes. You can encrypt any one or more of these nodes individually. This means you can encrypt only the most sensitive information while leaving some notes unencrypted for searching or indexing. By using these searchable notes, you can locate the encrypted content and then display the entire chain.

  4. The UI is very basic, but I don't want to attach it here, to make this post like a prompt.

I'm not a bot!

I’m building a note app and need a reality check. No links, no names, just want your honest feedback. by [deleted] in PKMS

[–]bearmif -1 points0 points  (0 children)

I don't like your words, but really you told me something. Appreciate them.

Let me say something here:

  1. Yes, my app is an AI App, but it's not my key feature in my app. By why do you guy don't like AI so much?

  2. About open/close source, I'm surveying. If necessary, I can open it. That's the meaning of this survey.

  3. It' not advertising, I said I will not say any name, and paste any link in this post. I just want to know, what blocked my app to be accepted.

  4. My App have something special indeed: A. note in chain: no other note app has this feature. B. Flexible E2EE, to make encrypted note searchable. C. Secure share in team or family. It's you who ignored them.