I agree, although this isn't 100% zero-knowledge. The keys are managed server side because the server needs to be able to read your notepad for the diff-sync.

I have written what I hope is a pretty plain-english privacy policy here https://getmicropad.com/policy.php#privacy