Two spaces, by design
Everyday notes are available without signing in. Private Space is intentionally separate and opens only when you select it from the main menu and authenticate. Hiding the option isn't what protects your content — encryption does.
Encryption at rest
Private notes, the vault's folder/index information and imported private media are encrypted locally using AES-256-GCM through Apple's CryptoKit. The app uses a random vault encryption key, protected through a PIN-derived wrapping key and device-specific Keychain material. Biometric authentication is optional.
Regular notes and ordinary photo attachments aren't encrypted with the Private Space key. They use local app storage and iOS's system-level protections.
PIN and biometrics
When you create Private Space, you choose a PIN. You can optionally enable Face ID or Touch ID after setup. iOS handles biometric verification; the app does not receive your fingerprint or face template. Private Space automatically locks when the app goes into the background.
Backups and recovery
Nook Notes provides manual encrypted exports for ordinary notes and for Private Space. These are separate exports with separate recovery keys. They are not automatic cloud sync. If you save the backup in a cloud-storage service yourself, that provider's privacy practices apply to the copy you upload.
Inspiring Ninja cannot retrieve an inaccessible PIN or recover the contents of an encrypted backup without its recovery key. Keep your recovery key separate from the backup file. Never email either to support.
Security has limits
Encryption reduces the risk of local data exposure, but no software can guarantee absolute security. Compromised or jailbroken devices, untrusted backups, user-initiated exports and operating-system vulnerabilities can affect confidentiality. Private video playback and recovery workflows should be tested before storing irreplaceable or highly sensitive material.
For a detailed explanation of data handling, please read the Privacy Policy.