Privacy policy

Updated November 3, 2026

Ferry is a sticky-notes app for Windows, Mac, Linux, iPhone and Android, made by Nollie. This policy explains what Ferry keeps about you, where it keeps it, and why.

The short version

  • Without an account, your notes stay on your device and aren't sent anywhere.
  • With an account, your notes are stored in it so they can reach your other devices.
  • Ferry has no ads and no tracking, and your notes are never sold or shared.
  • If Ferry crashes, it sends a crash report so the problem can be fixed. Reports never contain your notes, and you can turn them off.
  • Ferry counts how its features are used, anonymously, and you can turn that off too.
  • If you buy Ferry Pro, Stripe, Google Play or the App Store takes the payment. Ferry never sees your card.

Using Ferry without an account

You can use Ferry without signing in. Your notes, their history and the trash are then stored only on your device. The desktop app also remembers where your note windows sit on the screen, and the phone app keeps a copy of your notes for its home-screen widgets. If you use Ferry on an Apple Watch, the iPhone app also gives the watch paired with it a copy of your latest notes, and the watch hands the notes you dictate on it to the iPhone, over Apple's own connection between the two. Dictation on the watch is Apple's: Ferry receives only the text. All of this stays on your devices. Only crash reports and usage counts leave it, and, in the AppImage for Linux, a daily check of download.ferrynotes.com for a newer version, which sends nothing about you.

Using Ferry with an account

When you sign in, the notes on your device move into your account, and Ferry stores:

If you create an account with an email address and a password, the password is stored only as a secure hash by Firebase Authentication. Nobody at Ferry can see it.

Signing in with Google, Apple, Microsoft or GitHub

Ferry asks these providers only for your basic profile: your name and email address. It never gets your password for those accounts, or access to anything else in them. If you use Sign in with Apple and choose to hide your email, Ferry receives a private relay address from Apple instead of your real one. On Windows and Linux, Sign in with Apple runs on a page at ferrynotes.app, which hands Apple's answer straight to Ferry on your computer and keeps nothing.

Emails

Ferry sends email only when your account needs it: to verify your address, to reset your password, or to tell you that your sign-in email changed. There is no newsletter and no marketing email.

Where your data is kept

Your account and notes are stored with Google Firebase (Firebase Authentication and Cloud Firestore), on Google Cloud servers in the United States. Google processes this data on Ferry's behalf, under its data processing terms. It is encrypted in transit and at rest, and the database lets only your own signed-in account read or write your notes.

Like any online service, Google's servers also handle technical details such as your IP address and device type when the app connects, to deliver the service and protect it from abuse.

Crash reports

When Ferry crashes or runs into an error, it sends a crash report so the problem can be found and fixed. A report says what failed and where in Ferry's code, with Ferry's version, your device's model and operating system, and a short log of what the app did just before. It never contains your notes, and it isn't linked to your account.

The phone apps send their reports to Firebase Crashlytics, run by Google, and the desktop app sends its reports to Sentry, run by Functional Software, Inc., which keeps them in the European Union. Both handle your IP address to receive a report, and delete reports automatically after at most 90 days.

You can turn crash reports off: on the desktop under Settings, and on your phone in the menu on the notes screen.

Usage counts

Ferry counts how its features are used, to learn what to improve: for example, that Ferry was opened, that a note was made, which way someone signed in, or how many notes an export held. Each count also carries Ferry's version and your device's operating system, its version and its language setting.

The counts are anonymous. They carry no name, email address, account or device identifier, only a random session number that Ferry makes up again each time it starts, and they never contain your notes. They go to Aptabase, which keeps them in the United States for up to five years. Aptabase works out the country from your IP address and doesn't store the address.

You can turn usage counts off: on the desktop under Settings, and on your phone in the menu on the notes screen.

Paying for Ferry Pro

Payments for Ferry Pro are handled by Stripe. You pay on Stripe's checkout page, and your card or other payment details go to Stripe, never to Ferry. Stripe's privacy policy covers what it does with them, including if you choose to save them with Link, Stripe's way to pay faster next time.

So that what you buy belongs to your account, Ferry gives Stripe your account's email address, and keeps in your account a record of what you bought: the plan, until when it lasts, whether it renews, and Stripe's reference numbers for you and the purchase. The same record says when your free trial ends. The payments themselves, with the name and country you give at checkout, stay in Ferry's Stripe account for its accounts and taxes.

In the Android app, Pro is bought through Google Play instead, under Google's privacy policy, and your payment details go to Google, never to Ferry. Ferry tells Google Play your account's Ferry user number, a random code, so the purchase belongs to your account, and keeps Google's reference for the purchase with the same record of what you bought. Google keeps the payment itself, and shows Ferry the order and the country it was made in, for Ferry's accounts and taxes.

In the iPhone and Mac apps, Pro is bought through the App Store, under Apple's privacy policy, and your payment details go to Apple, never to Ferry. Ferry gives the App Store a random code made from your account's Ferry user number, so the purchase belongs to your account, and keeps Apple's reference for the purchase with the same record of what you bought. Apple keeps the payment itself, and shows Ferry the sale and the country it was made in, for Ferry's accounts and taxes.

What Ferry doesn't do

Exporting your notes

When you export your notes, Ferry saves a file wherever you choose. The file is yours, and Ferry never receives a copy.

Keeping and deleting your data

This website

ferrynotes.com sets no cookies and runs no analytics. It is served by Firebase Hosting, which handles your IP address to deliver the pages.

Children

Ferry isn't directed at children under 13, and we don't knowingly collect information from them. If you believe a child has created an account, tell us and we'll delete it.

Your rights

You can see and export all of your notes in the app at any time. You can also ask us for a copy of your data, to correct it, or to delete it. Depending on where you live, for example in the EU, the UK or California, you may have further rights under data protection law, including the right to complain to your local data protection authority.

Changes to this policy

If this policy changes, this page will show the new version and the date it changed.

Contact

For a question about this policy, or to ask for a copy of your data, a correction or a deletion, email contact at ferrynotes.com.