Security

Genesis Field Notes uses a local-first architecture designed to keep your notebook on your Mac and minimize unnecessary external data exposure.

Architecture

• Local storage: Notebook data is stored on your device at ~/Documents/Genesis Field Notes/.
• No accounts or telemetry: The app is intended to operate without user accounts, advertising, analytics, or hidden telemetry.
• Keychain for API keys: Optional OpenAI API keys are stored in the macOS Keychain, not in plain-text files or remote storage.
• User-initiated AI: AI communication happens only when you explicitly request it. Provider requests run through Rust, not the web view.
• Atomic writes: Notebook files are written atomically to reduce the risk of corruption during saves.
• Restricted web view: The app’s content security policy limits network access from the web view to local IPC only.

Your responsibilities

• Protect access to your Mac, backups, and email accounts.
• Keep macOS and Genesis Field Notes updated.
• Review AI-generated output before relying on it.
• Protect your OpenAI API key and monitor usage on your provider account.

Responsible disclosure

If you believe you have found a security vulnerability, please contact support immediately with a clear description, steps to reproduce, and any relevant screenshots or logs.

Email: support@genesisfieldnotes.com

Please do not publicly disclose vulnerabilities before a fix is available, when possible.

See also: Privacy Policy · AI Transparency