Your notes stay ordinary files on your disk. Your AI cites its sources — or admits it has none. Every change is signed, and you are the one who checks it.
Download · Docs · Report a bug · altretta.com
Ask your notes a question. The answer comes back with the passages behind it — file, line numbers, open them yourself. Ask about something you never wrote down and it tells you so, instead of producing three confident paragraphs of fiction.
That is the whole pitch. Everything below is how it is kept honest.
Free. No account. Nothing uploaded when you install it. Everyone gets the same build — there is no crippled free version and no separate trial download.
| Platform | You get | |
|---|---|---|
| 🍎 | macOS | One universal .dmg — Apple Silicon and Intel land on the same file |
| 🪟 | Windows | .exe installer, x64, Windows 10 and 11 |
| 🐧 | Linux | .AppImage, with .deb and .rpm alongside |
Every version is also attached to the Releases page here. The website stays canonical: it reads the same manifest your installed copy reads, so the two can never disagree about what "current" means.
Every note is plain Markdown in a folder you picked. Not a row, not an export
away from being useful. grep it. Put it in git. Open it in vim at 3am in ten
years, with or without us. Delete Altretta tomorrow and your notes do not
notice.
Altretta ships no model and sells you no tokens. Connect the assistant you already pay for over MCP — Claude, Cursor, VS Code, Windsurf, Zed and friends are detected and configured in one click — or point it at something running on your own GPU, in which case your notes never touch a network at all.
Every answer carries the passages it was drawn from and a verdict: grounded, weak, or ungrounded. When your notes cannot support an answer, you get a refusal instead of a hallucination. That is a feature, and it took longer to build than the ones that talk.
Pasting a whole vault into a prompt burns context and money. Altretta hands the model only the cited passages that matter — 94.3% fewer input tokens than pasting everything, measured over 24 pre-registered questions on a 43-note demo vault that ships inside the app.
The methodology is published. So are the questions where the saving comes out negative, because a benchmark that only reports its wins is an advertisement.
Twenty languages have symbol extractors. Your repository lands in the same signed graph as your notes: every symbol, what calls what, what a change would break, and which document went stale describing it.
Append-only, signed, no destructive deletes. Removal is a signed tombstone, so time travel is exact. Every page Altretta publishes ships its own verifier that checks the signature in your browser, offline, with no account.
Change one byte and watch it refuse. Please do — we would rather you tried.
No analytics library. Not disabled by default — not in there. No crash telemetry, no usage reporting. A fresh install does not even work out which machine it is running on.
Content leaves only when you switch something on: your AI, publishing, sync, imports, sign-in. Every one of those paths, and every network call the app can make, is named on one page. Point a network monitor at it and check.
No source code lives here. This is the front door: somewhere to download Altretta, somewhere to report a bug, and somewhere to read what it does before installing it.
We are not going to call this open source, because it is not, and you would check. The Open Source Definition forbids restricting commercial use, and our licence restricts commercial use.
We are not going to call the app source-available either, because that would be the same move with a softer word. The desktop app's source is not published anywhere. What is public is the layer beneath it, and the split is worth knowing before you install anything:
- AIngle — the context engine behind the retrieval, the semantic graph and the signed history — is public and readable. Apache-2.0 for individuals, academia, evaluation and organisations under $1M revenue; a commercial licence above that, or if you ship it inside something you sell. It is the part that makes claims about your data, so it is the part you should be able to read, and you can.
- The desktop app's source is not published at all. Its guarantees do not rest on trusting it: the byte layout of the signed history is a published spec, and the verifier runs in your browser rather than on our word. Verify the output, not the vendor.
- The plugin catalogue is public. Plugins are signed, sandboxed, and declare every permission before they run.
If reading every line that touches your notes is non-negotiable for you, better you know that here than after installing.
Include your version (Settings → About), your OS, and what you expected instead. If a specific note is involved, describe its shape rather than pasting it — we do not want your notes and could not debug them anyway.
Feature requests go in the same place. So does "this sentence made me think my notes were being uploaded", which is a real bug in a product that asks you to trust it.
Security issues do not go here. Use private reporting or email security@apilium.com — scope, response times and known limits are in SECURITY.md.
Every product has a list like this. Most are written after someone complains. Ours is written first:
- No mobile app. Not a beta, not a companion. macOS, Windows, Linux. If you capture on the move, that may decide it for you.
- A synced vault leaks its shape. Contents are encrypted end-to-end before they leave your device — filenames and folder structure are not. Whoever hosts the folder sees how many notes there are and what they are called.
- No key escrow, no reset. Lose both keys and the vault is gone. That is the trade, and it is the same property that means nobody can be made to open it.
- The local vault is plaintext on purpose. It has to be, or no other editor could open your notes. Encryption applies to what leaves the machine.
The app, grounded answers and one synced folder are free forever — no trial clock, nothing to cancel. Paying adds every machine you own, publishable pages anyone can verify, the full history, and the encrypted team vault.
Pro €4.99/mo · €49/yr — Team €7.99/seat/mo · €79/seat/yr. Thirty-day trial, no card. → What paying adds
| 🌍 Website | altretta.com |
| 📖 Documentation | altretta.com/en/docs |
| 🤖 For AI assistants | llms.txt |
| ⚙️ Engine source | ApiliumCode/aingle |
| 🧩 Plugin catalogue | ApiliumCode/altretta-plugins |
| 🪄 Altretta skill | ApiliumCode/altretta-skill |
| 💳 Account & billing | my.apilium.com |