Nooto
com.nooto.app
android AGPL-3.0-or-later kind 32267
Cross-platform, privacy-focused notes with end-to-end encryption
latest release
client-v0.2.5
main
released 2026-10-14 14:07 UTC
Release indexed without asset descriptors yet.

about
- description
- Nooto is a note-taking app that keeps your notes private. Everything is encrypted on your device before it ever leaves it, using AES-256-GCM encryption with keys derived locally via Argon2id. Nobody but you, not even the server operator, can read your notes. **Features:** - Notes are encrypted on-device before sync; the server only ever sees ciphertext - Works fully offline, no account required to use the app locally - Optional sync across devices, using the built-in public server or your own self-hosted instance - Folders, drag-and-drop organization, and a markdown editor - Fully open source and auditable **What the server stores:** only an opaque note ID and ciphertext blobs for content and metadata. No readable title, no readable content, no plaintext of any kind. **Please note:** Nooto is beta software and still under active development. The encryption design has not yet been reviewed by an independent security auditor. Use at your own discretion, and please report issues on the project's GitHub page.
- publisher
- 78ce6faa72264387284e647ba6938995735ec8c7d5c5a65737e55130f026307d
- first seen
- 2026-10-18T03:45:19.049216+00:00
- last event
- 2026-10-14 14:07 UTC
- install
- zapstore.dev or any Zapstore-compatible client
- topics
- #note
source & build
- repository
- https://github.com/clempera/nooto
- arch flags
- android-arm64-v8a
- manifest
- missing
releases (kind 30063)
1 release indexed; latest client-v0.2.5.
| version | channel | released | event |
|---|---|---|---|
| client-v0.2.5 | main | 2026-10-14 14:07 UTC | 45a5e94d… |
assets & verification
Every app, release and asset event is schnorr-verified (NIP-01 id + signature) before it enters the catalog, and assets are content-addressed by sha256. We subscribe read-only to the catalog relay — never write to it.
Showing the newest 0 asset descriptors; the full set is in /api/apps/78ce6faa…