The note-taking market in 2026 is dominated by cloud-dependent, account-gated, subscription-funded products — Google Keep, Notion, Evernote, Apple Notes, Bear, Standard Notes, Obsidian, OneNote, Joplin, Notesnook, and Simplenote. Each solves a version of the same problem. None of them solve it the way Just A Notepad App does. This analysis examines 18 dimensions across 12 competing products to establish exactly where Just A Notepad App stands — and why the gap is not a matter of opinion.
| Feature / Dimension | Just A Notepad App Barb The Builder · HTML · 2025 |
Google Keep Free · Cloud · Google |
Apple Notes Free · iCloud · Apple |
Notion $12/mo · Cloud · Notion Labs |
Evernote $15/mo · Cloud · Bending Spoons |
Standard Notes Free/Paid · E2E · Open Source |
Obsidian Free · Local · Obsidian Inc. |
Bear $3/mo · iCloud · Shiny Frog |
Joplin Free · Open Source · E2E |
OneNote Free · Cloud · Microsoft |
Simplenote Free · Cloud · Automattic |
Notesnook Free/Paid · E2E · Open Source |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Privacy & Security | ||||||||||||
| Zero Data Transmission | ✦ Yes — architectural. Nothing ever leaves the device under any circumstance. | No — all notes synced to Google servers. Google ToS permits ML use. | No — synced to iCloud. Apple holds keys unless ADP enabled. | No — stored on Notion servers. Staff can technically read content. | No — cloud-dependent. 2016 breach on record. Server-side encryption only. | Sync optional. Zero-knowledge on sync. But account still required. | Local vault option. But sync requires cloud. Setup complexity high. | No — iCloud dependent. Comparable privacy to Apple Notes. | Local option. E2E sync available. Open-source and audited. | No — Microsoft servers. Part of 365 ecosystem data collection. | No — Automattic servers. Plain text, no encryption at rest. | Zero-knowledge E2E. But account required. Server involved in sync. |
| No Account Required | ✦ Zero. No email. No registration. No identity. Open and use. | Google account required. | Apple ID required. | Account required. | Account required. | Account required for sync. | Local vault: no account. Sync: account needed. | Apple ID required. | Local only: no account. Sync: account needed. | Microsoft account required. | Account required. | Account required. |
| Client-Side Encryption Standard | ✦ AES-GCM 256-bit. PBKDF2 at 600,000 iterations. SHA-256. 16-byte random salt. Web Crypto API. PIN hash only — key never stored. | None. Plain text at rest on Google servers. | ADP optional. Most users: standard iCloud encryption, Apple holds keys. | No encryption at rest. Notion can read your notes. | Server-side only. Evernote holds keys. | AES-256 E2E. But key derived from account password — server involved. | Local vault: no encryption by default. Plugin required for E2E. | iCloud encryption. Apple holds keys. | AES-256 E2E with master password. Open-source, NIST FIPS 197 compliant. | Microsoft encryption. Server-side. | No encryption at rest. | AES-256 E2E. Zero-knowledge. Open-source. |
| Hidden Private Journal | ✦ PIN-gated vault hidden behind a user-defined profile photo. Invisible entry point. Non-recoverable by design. | — Not available | Locked notes via Face ID / passcode. Visible as locked, not hidden. | — Not available | — Not available | Locked notes available. Visible as locked. Not hidden. | — Not available | — Not available | — Not available | — Not available | — Not available | — Not available |
| No Analytics / Tracking | ✦ Zero. No tracking pixel. No telemetry. No error logging. No session data. Architecture makes collection impossible. | Google analytics. Note content used for ML and ad targeting per ToS. | Apple analytics collected. Privacy-forward but not zero. | Analytics collected. Notion can read content. | Analytics and tracking present. | Zero-knowledge. No content analytics. | Local vault: zero analytics. Sync service may collect metadata. | Some analytics via Apple ecosystem. | Open-source. No tracking in core app. | Microsoft telemetry present. | Automattic analytics present. | Open-source. Zero-knowledge. No content analytics. |
| Access & Availability | ||||||||||||
| No Installation Required | ✦ Single HTML file. Opens in any browser on any device. Zero installation. Zero app store. | Web version available. App preferred for mobile. | iOS/Mac only for full features. No Android. | Web-first. App available. | Web version available. | Requires app installation or web account. | Desktop app required for full function. | iOS/Mac app. No Android. No Windows. | Desktop or mobile app installation required. | Web version available but feature-limited. | Web version available. | Web version available. |
| Full Offline Capability | ✦ 100% offline after first load. Works on a plane, in a basement, without Wi-Fi. Forever. By architecture. | Requires internet for sync. Limited offline cache. | Offline access available. Sync requires connection. | Slow or broken offline. Known issue with growing notebooks. | Offline available. Sync on reconnect. | Offline available. | Local-first. Full offline by design. | Offline available on device. | Local-first. Full offline. | Offline available. | Primarily cloud-dependent. | Offline available. |
| Cross-Platform (Any Device) | ✦ Any device with a browser. iOS, Android, Windows, Mac, Linux. No exceptions. No ecosystem lock-in. | Cross-platform. | Apple ecosystem only for full feature set. | Cross-platform. | Cross-platform. | Cross-platform. | Cross-platform but setup varies per OS. | Apple only. | Cross-platform. | Cross-platform. | Cross-platform. | Cross-platform. |
| Zero Cost Forever | ✦ One-time purchase on Gumroad. No subscription. No per-seat fee. No feature gates. Yours forever. | Free. But you are the product. | Free. iCloud storage limits apply. | $12/user/month for Plus. AI adds $24/user/month. | $15/month. Free tier severely limited (50 notes, 1 device). | Free tier limited. Paid from $90/year. | Free core. Sync service extra. | $3/month after trial. | Free. Open-source. | Free with Microsoft account. | Free. | Free tier. Paid from $4.49/month. |
| Human-Centered Features | ||||||||||||
| Voice-to-Text Input | ✦ Native Web Speech API. Continuous listening mode. Transcribes in real time directly into the notepad. No third-party service. | Mobile keyboard dictation only. Not native to app. | System dictation. Not integrated into note flow. | Not native. Relies on OS dictation. | Not native. Relies on OS dictation. | Not available natively. | Not available natively. | Not available natively. | Not available natively. | Built-in dictation on some platforms. | Not available. | Not available. |
| Text-to-Speech (Read Back) | ✦ One tap — the app reads your saved notes out loud via Web Speech Synthesis API. Built for people who need to hear what they wrote. | Not available. | Not available natively. | Not available. | Not available. | Not available. | Not available. | Not available. | Not available. | Not available. | Not available. | Not available. |
| Auto-Lock / Inactivity Timeout | ✦ 2-minute auto-lock. Resets on any interaction. Vault closes automatically. No manual lock required. | — No vault to lock. | Face ID / Touch ID lock on locked notes. Not auto-timeout. | — No equivalent. | — No equivalent. | Passcode lock available. Auto-lock varies by platform. | — No equivalent. | — No equivalent. | — No equivalent. | — No equivalent. | — No equivalent. | — No equivalent. |
| Multiple Themes | ✦ Three themes: Executive (dark), Pearl (light), Fluid Cobalt (deep blue). Each persists independently of the encrypted vault. | Light / Dark mode. | Light / Dark mode. | Light / Dark. Limited theme customization. | Light / Dark mode. | Multiple themes on paid tier. | Extensive theme customization via CSS. | Light / Dark. Some color accents. | Light / Dark mode. | Light / Dark mode. | Light / Dark mode. | Light / Dark mode. |
| Encrypted Backup & Restore | ✦ One-tap export of encrypted backup file. One-tap restore on any device. Backup is unreadable without correct PIN. | Google Takeout export. Unencrypted. | iCloud backup. Apple controls encryption. | Export available. Not encrypted client-side. | Export available. Not zero-knowledge. | Encrypted export available. | Plain text Markdown export. Local file. Easy migration. | iCloud backup. Not user-encrypted. | JEX/Markdown export. E2E encrypted backup. | OneNote export. Microsoft controls encryption. | Simplenote export. Plain text. | Encrypted backup available. Zero-knowledge. |
| Architecture & Deployment | ||||||||||||
| Single File Deployment | ✦ One HTML file. Drag to any host. Deploy in 30 seconds. No build step. No config. No server. | Google infrastructure. Not deployable independently. | Apple infrastructure. Not deployable independently. | SaaS. Not self-hostable on standard plan. | SaaS. Not self-hostable. | App + server. Not single-file. | Vault is a folder. Deployable but not a single file. | App dependent. Not self-deployable. | Self-hostable. But requires setup. | Microsoft infrastructure dependent. | Automattic infrastructure dependent. | Self-hostable. Requires Docker or server setup. |
| White-Label / Enterprise Licensing | ✦ Full white-label available. Custom domain. Your brand. Your deployment. Transferred ownership. Three tiers: Team, Company, Enterprise. | Google Workspace. Not white-labelable as a product. | Not licensable. | Notion for Teams. Not white-label. | Teams plan. Not white-label. | Not white-labelable. | Not white-labelable as a product. | Not licensable. | Open-source. Not white-label commercial product. | Microsoft 365. Not white-labelable. | Not licensable. | Open-source. Not white-label commercial product. |
| Device-Specific Salting | ✦ Salt generated per device. Data encrypted on one device cannot be decrypted on another without the backup restore process. Non-transferable by architecture. | No local encryption. Cloud-based. | iCloud handles sync. Not device-salted. | Not applicable. Cloud storage. | Not applicable. | Account-based key. Not device-salted. | Not device-salted by default. | Not device-salted. | Not device-salted. | Not applicable. | Not applicable. | Account-based key. Not device-salted. |
| In-App Browser Protection | ✦ Detects Facebook, Instagram, Messenger. Blocks operation and forces native browser handoff. Protects encryption integrity in sandboxed WebView environments. | — Native app. Not applicable. | — Native app. Not applicable. | — Native app. Not applicable. | — Native app. Not applicable. | — Native app. Not applicable. | — Native app. Not applicable. | — Native app. Not applicable. | — Native app. Not applicable. | — Native app. Not applicable. | — Native app. Not applicable. | — Native app. Not applicable. |