Why We Don’t Want Your Data

Almost every app you use has a privacy policy. Long documents, written carefully, all making the same promise: we will protect your data.

We would like to make a different promise. It is shorter: we don’t want your data in the first place.

Not because data is scary, but because of a simple observation we keep coming back to. Data that was never collected cannot be leaked. It cannot be sold, subpoenaed, breached, or quietly repurposed for something you never agreed to. The safest database is the one that does not exist.

What that looks like in practice

This is not a slogan we added to the about page. It is an architectural decision, and it shapes every product we have shipped.

NotedCLI is local-first. Your task list lives in your browser and nowhere else. There is no account, so there is no server copy, which means there is nothing of yours sitting on our infrastructure waiting to be exposed.

Utiliify works offline. A JSON formatter or a UUID generator has no reason to phone home, so it doesn’t. Your data never leaves your device because the tools keep running when the device has no connection at all.

Remote Rituals needs no signup to play. The daily game asks for nothing before the fun starts, because a party game that demands registration has misunderstood the assignment.

MailChrono is the interesting case, because it needs your email to be useful. There is no way around touching your data — so we narrowed the touch as far as it goes. MailChrono connects to Gmail and Microsoft 365 with read-only access, fetches messages in real time when you look at them, and stores zero emails on our servers. When you close the tab, there is no archive of yours left behind with us.

The trade-offs, stated plainly

We want to be honest about what this costs, because it does cost something.

Local-first means no server to sync from. If you clear your browser storage, your NotedCLI board is gone — there is no cloud copy to recover, and no way for us to restore it for you. Real-time fetching means MailChrono cannot do the things a client with a synced archive can do. No signup means no cross-device magic in Remote Rituals.

These are real limitations. We accept them on purpose, because the alternative is holding your data to buy convenience — and once a company holds your data, the privacy policy is the only thing standing between it and every future temptation. We would rather have no data and no temptation.

Why now

It feels worth saying out loud at this particular moment, when nearly every tool on the internet is racing to collect more: more behavior, more context, more of your words, all feeding models built somewhere else.

In that world, a tool that cannot collect your data stops being a compromise. It becomes the feature.

Going forward

Every new AveFrame product starts with the same question: can this work without holding user data? Usually the answer is yes. When it truly is not, we build the narrowest read-only version we can, and we say so plainly — the way MailChrono does.

Your data is yours. The best way we have found to keep that promise is to make sure it never becomes ours.

— The AveFrame Team