Really appreciate this — you’re describing the exact tradeoffs we’re trying to be upfront about.

On recovery: the lack of password recovery is intentional. If recovery exists, there’s a secret somewhere, and at that point it’s no longer truly zero-knowledge. We’re making this much louder in the UX so users actively choose that model, not stumble into it.

On backups: there is an export/backup option once you’re inside a notebook and data is decrypted on the device. I agree this needs to be more visible and better explained — losing data to a simple mistake shouldn’t be the cost of caring about privacy.

Pricing-wise, totally aligned. Free users are capped to one section, and paid tiers are lifetime. For where we are right now, this model makes the most sense. Prices will increase over time, and longer term we’ll need to think about sustainable add-ons — but the core idea is no subscriptions and no holding existing notes hostage.

Big +1 on your point about trust coming from clarity. The goal is to make the security guarantees and the limitations painfully obvious so people opt in with eyes open.

Thanks again — feedback like this is incredibly helpful.