Muhammad Nabil Bin Mohd Sufian Universiti Teknologi Petronas (UTP)
With the growing reliance on digital note-taking apps, users frequently store sensitive information such as bank details, passwords, and personal data in these
platforms. However, concerns persist regarding the security and privacy of stored data, as traditional note-taking apps often rely on server-managed authentication and
encryption keys, introducing potential vulnerabilities. In response, this project introduces OnlyYourNotes, a secure note-taking application that implements Zero Knowledge-inspired architecture (ZKA) with hybrid storage. The focus is on
enabling digital notes users securely store notes where only the user can decrypt and access their notes, even the developers or cloud service providers cannot view the contents. By utilizing AES-256 encryption and client-side encryption techniques,
the system secures user data both in transit and at rest. The encryption key is managed locally using flutter_secure_storage, eliminating the need for server-side key
management. The app includes features such as adding, editing, and exporting encrypted notes, with a user-friendly interface. A minimal authentication mechanism
is implemented to demonstrate secure access without server intervention. Testing covers functionality, encryption correctness, key persistence, and usability. This
project addresses rising concerns about data privacy in personal productivity apps and serves as a lightweight, practical implementation of ZKA for mobile environments.