We promise.

Endearist runs entirely on your device. Your contacts, your notes, your interaction history — they never land on our servers, because we simply don't have a central server that reads your content. The SQLite database lives on your hard drive, in your Documents folder, under your control.

This isn't a marketing claim we'll walk back someday. It's an architectural decision made from the very first line of code, and every feature since has been evaluated against it: can this work without a server call? If yes, it stays offline. If no, we ask ourselves whether we should build it at all.

If you uninstall Endearist today, your data is still there tomorrow — in your Documents folder, as a clean SQLite file, readable by any standard tool. We disappear from your system; your memories stay.

Optional cloud sync is available — but it's end-to-end encrypted. Even if you choose Google Drive or iCloud as your sync transport, we only ever see opaque, encrypted bytes. Your sync key never leaves your device.

This website uses Plausible Analytics — our own self-hosted instance. Plausible collects no cookies, no fingerprints, no personal data. What we see: how many people visited a page and which country they came from. Not who. Not how long. Not where they went next.

No Google Analytics. No Facebook Pixel. No Hotjar. No retargeting scripts. We have no embedded social buttons that report your visit to third-party servers. When you visit our website, nobody outside our team learns about it — and we only learn it as an aggregate number, not as your profile.

Inside the app itself, there is no telemetry transmitted without your explicit consent. If we ever add opt-in crash reporting, it will be exactly that: opt-in. The default setting is silence.

We make no money selling your behavior. Our only business model is that you buy the app — because it's good enough that you want to.

Pro Lifetime costs €69. Once. Then €0. All v1.x updates are included — not as a temporary goodwill offer we'll withdraw later, but as a written promise that lives here and won't disappear.

Subscription models create a conflict of interest that quietly shapes every product decision: how do I keep the user long enough to bill them next month? We don't want that conflict. Our only incentive is to build something good enough that you recommend it — or buy the next major version when it arrives.

If we ever build Endearist v2.0 with genuinely new foundations: Pro Lifetime buyers from v1 get a 50 % discount on the upgrade. No forced repurchase, no threats of feature removal. That's the deal.

Free stays Free. We don't use dark patterns to pressure you into upgrading — no annoying banners, no deliberately painful feature gates. If you want to upgrade, you'll buy it because it's worth it to you. Not because we pushed you there.

Endearist is independent and self-funded. No venture capital, no outside investors, no acquisition discussions. This isn't a romantic pose — it's a deliberate decision, because VC funding and privacy-first products are structurally hard to reconcile. VC needs an exit, exit usually means acquisition, acquisition often means: new owner, new business model, new data policy.

You know the stories: Mesh was acquired by Automattic. Clay was sold to ServiceTitan. Accompany to Cisco. Every time, users were left asking: what happens to my data now? Will I get notice if the privacy policy changes? Can I still export before the service shuts down?

Our promise: if we ever sell Endearist, we will announce it in advance. We will give an export period of at least 90 days. And the app code and data format spec will become public domain. No lock-in after the lights go out.

If we shut down without an acquisition: same rule. 90 days notice, full export, open-source release of the core. Your data belongs to you — even if we stop existing.

You can export all your data as plain Markdown at any time — no waiting, no request form, no reason required. The export works offline, needs no server connection, and produces readable text files you can open in any editor.

The format is intentionally simple: one Markdown file per contact, structured frontmatter for machine-readable fields, free text for notes and interactions. You can open it in Obsidian, search it in VS Code, read it into a Python script, or just archive it and never touch it again.

In addition to the Markdown export, the SQLite database sits directly on your device. No hidden path, no encrypted container — the Settings screen shows you the exact file path. You can open it any time with DB Browser for SQLite, DBeaver, or any other tool and read or manipulate it directly.

Data portability isn't a bonus feature. It's the foundation for trusting us — because you know you can always leave and take everything with you. When you go, you take everything.