Fortnote

The Most Secure Offline Vault
for Your Notes

AES-256-GCM, HMAC, offline-only, biometric unlock

Google Play Coming soon on iOS

Built for Real People Who Value Privacy

Fortnote keeps your notes truly personal. Here’s how it protects them without compromise.

Stays Offline

The app never goes online. Your notes live only on your phone — not in the cloud and not on any server you can’t control. No accounts, no silent syncs, no surprises. Only you can access them.

Locked With Military-Grade Encryption

Every note is sealed with AES-256-GCM and verified with HMAC. In plain words: even if someone copied your files, they won't be able to read a single word without your encryption key.

Protected by Your Phone’s Hardware

Your encryption keys never leave the phone’s secure chip (Android Keystore/StrongBox where available). Pull the storage or break the device — the keys stay locked in hardware.

Quick Unlock

Open with fingerprint or face in a tap. If biometrics fail, your PIN or password is always there as a backup. Fast when you need it, strict when you don’t.

No Ads. No Trackers.

Fortnote doesn’t collect analytics, sell data, or track behavior. It’s a quiet app that does one job well — keeping your notes private.

Warns You About Risk

If the device looks rooted or jailbroken, you’ll see a clear warning. You decide whether to continue or step back — no guesswork.

You Choose When to Export

Back up on your terms. Exports are local and encrypted — no automatic uploads and no surprise syncs. You stay in control.

Rich-Text Notes

Write freely with headings, bold, lists, and checkboxes. All formatting — even the tick marks — is encrypted just like your text.

Fast & Lightweight

No bloat, no lag, and no background drains. Fortnote opens quickly and stays snappy — even on older phones.

Built-In Security Check

On every launch, the app self-tests its encryption and integrity. If anything is off, a vault status icon lets you know immediately. Stepping away from your phone? Fortnote can auto-lock or fully close after a time you choose. That way, your vault is never left openby accident.

How We Compare

Capability Fortnote Typical Notes App
Default network access None (offline-only) Frequent background calls
Data location On-device only Cloud account by default
Encryption AES-256-GCM per note Varies; often “at rest” only
Integrity checks HMAC authentication Varies / not guaranteed
Key storage Android Keystore; StrongBox when available App-managed or device lock only
Biometric unlock Yes (with PIN fallback) Usually
Trackers/Telemetry None Common (analytics, crash reports)
Tamper awareness Root/JB detection with warnings Rare
Block screenshots Yes (when supported) Rare
Auto-close on background Yes (configurable) Occasional / app-defined
Auto-lock after timeout Yes (configurable) Sometimes / not strict
Exports Manual, local, encrypted Cloud export/sync by default
Crypto self-test Yes (AES-GCM + HMAC) No / uncommon
Rich-text support Yes (encrypted) Varies

Choose Your Vault Level

Start fully offline for free. Upgrade when you want more control and anti-leak protections.

Fortnote Core (Free)

Offline, encrypted, no accounts — everything stays on your device.

£0 (Life Time)

  • • Offline-only notes
  • • AES-256-GCM + HMAC integrity
  • • Android Keystore key protection
  • • Biometric / PIN unlock
  • • Root / jailbreak warning

Fortnote Pro (One-time)

Same offline model — with extra protection, you pay once and own forever.

£5.99 (Launch Price)

Limited introductory offer for early users.

  • • Everything in Core
  • • Auto-lock & auto-close controls
  • • Screenshot blocking (when supported)
  • • Encrypted exports on demand
  • • Pinned notes
  • • Occasional secure online check for purchase

FAQ

No. Fortnote is fully offline for your notes and vault data — we don’t sync, we don’t upload, and we don’t collect analytics. The only time the app may reach the internet is to securely validate a one-time purchase or license, and even then your encrypted notes never leave your device and the check does not read or transmit your content.
Keys are generated per-install and wrapped by the Android Keystore. If your device supports hardware security modules, Fortnote uses them automatically (StrongBox where available). Occasional purchase/license checks do not touch or export your encryption keys — those stay on the device.
If rooting or jailbreak is detected, Fortnote shows a clear warning so you can protect your data. On a compromised device, you should assume a higher risk of screen capture, keylogging, or tampering — the app will tell you so you can decide whether to continue.
Yes. By default your notes stay local; if you export them, you’re responsible for safeguarding the exported files. Always protect exports with a strong password or passphrase — weak passwords make exported backups easier to break than the vault itself.

Privacy Policy

Effective date: 06 November 2025

Fortnote is built to keep your data safe and private. Everything happens on your device — your notes never leave it. We comply with applicable privacy and data-protection laws including the UK GDPR and EU GDPR.

1. Data We Collect

2. How Your Notes Are Protected

All notes are encrypted locally with AES-256-GCM and verified with HMAC to detect tampering. Each installation has a unique encryption key stored in the Android Keystore (hardware-backed when available). Keys never leave your device. Even if your phone is lost or copied, notes cannot be read without your unlock credentials.

3. Exports and Backups

Exports are optional and encrypted locally. When you create a backup, Fortnote lets you set your own password or passphrase. You are responsible for protecting any exported files — keep them secure and use strong passwords to maintain encryption strength.

4. User Rights

5. Children’s Privacy

Fortnote is not directed at children under 13. We do not knowingly collect personal data from minors. If you believe a child has provided information, please contact us and we will delete it immediately.

6. Security Practices

Fortnote undergoes continuous internal testing to ensure encryption integrity. Root or jailbreak detection is built in to warn you of potential security risks. We use industry-standard protocols (TLS) for the occasional license validation. No third-party analytics SDKs or advertising libraries are included in the app.

7. Changes to This Policy

Any updates to this policy will be posted on fortnote.app/privacy. Substantive changes will include a new effective date and summary of what changed.

8. Contact

If you have any questions, concerns, or feedback about this Privacy Policy or Fortnote in general, please contact us at:

General enquiries: support@fortnote.app
Security issues or vulnerability reports: security@fortnote.app

Fortnote is developed and published by Nobel Future Systems Ltd,
Registered in England & Wales — Company No. 16835506