Last updated: 2026-08-25.
There are two different things here, with two different sets of rules. Read the half that applies to you. Both are operated by System Operator LLC.
- Part A, the app. You installed wander on a Mac or an iPhone and you edit files in your own folders. There is no account, nothing is uploaded, and nothing of yours reaches us. Part A is all that applies to you.
- Part B, wander.md and wander cloud. You signed in and turned the cloud on for a vault, or you use the website. Then Part B applies as well, for the vaults you turned on. Part A still covers the app itself.
Part B never starts on its own. Installing the app does not sign you in, and signing in does not sync anything until you turn the cloud on for a specific vault.
Part A: the app
What it is
wander is a native macOS and iOS application that reads and edits markdown files in folders you control. It is a program running on your machine, not a service. We do not host, receive, see, or store anything you write in it.
Your files
They are yours, and they stay where you put them. You are responsible for what you edit and for keeping your own backups. wander writes minimal, non-destructive changes and has autosave, external-change detection and conflict handling, but a backup is still your job.
As is
The app is provided "as is", without warranties of any kind.
Purchases
The app is distributed through the Apple App Store. Purchases, subscriptions, refunds and taxes are handled by Apple under the App Store terms, and your purchase agreement for the app is with Apple.
Part B: wander.md and wander cloud
Optional, and a beta
wander cloud is off until you sign in and turn it on for a vault. It is free during the beta, and a beta is what it says: no uptime promise, no service level, features that move, limits we can change. Keep your own copy of anything you would hate to lose. Your files stay in your folder either way, which is the point of the design.
If we start charging for it we will say so first, and nothing charges you without your agreement.
Your content stays yours
You own what you write. Turning on the cloud does not change that, and we claim no ownership of it.
The permission we need to run it
To operate the service you give us permission to store, copy, transmit and process the content in the vaults you turned the cloud on for, so that we can sync it between your devices, render it, index it for your own search, and serve the pages you choose to make public to whoever visits them.
That permission exists only to run wander for you. It covers nothing else: we do not sell your content and we do not use it to train models. It ends when you delete the content or the account, apart from backups already taken, which age out on the schedule in the privacy policy.
The service is not end-to-end encrypted. Our servers can read what you sync, and the privacy policy says exactly what that means.
Publishing
A vault is private until you make something public. Making a file, folder or vault public is publishing: those bytes become readable by anyone with the address and indexable by search engines. You need the rights to what you publish, and it has to follow the rules below.
Acceptable use
Do not use the service to break the law, infringe someone's rights, host malware or phishing, publish sexual content involving minors, harass people, or try to break, overload or get around its limits and protections. Do not resell it.
We can suspend or remove content, or an account, that does these things. Where we reasonably can, we say why first.
Copyright and abuse
Send copyright complaints and abuse reports to wander@tinysend.com with enough detail to find the page. We remove infringing published content and terminate repeat infringers.
Ending it
You can stop at any time: turn the cloud off for a vault, or delete your account. What happens to the data then, and how long the grace period is, is in the privacy policy. Either way the app keeps working on your folders, because Part A never depended on any of this.
We can end your access to the service if you break these terms, if we stop offering it, or after a long period of inactivity. If we shut it down we will give notice and time to export.
Both parts
Liability
Everything here is provided "as is" and "as available". To the extent the law allows, we are not liable for indirect or consequential damages or for lost data, and our total liability is limited to what you paid us in the twelve months before the claim. Nothing here limits liability that cannot be limited by law.
Changes
We can update the app, the service, and these terms. We date this page when it changes, and a material change is announced in the changelog as well.
Governing law
These terms are governed by the laws of the State of Delaware, United States, where System Operator LLC is formed, without regard to conflict of law rules.