I quote from your website: "Don't worry if you don't know what GitHub is, you only need to create an account." You don't appear to make any assumptions that your users understand that their notes will be published and readable by anyone on the internet.

Furthermore, your clarification: "Currently, Kobble stores all user data in secret GitHub Gists, under your account. Secret gists are not private." does not help because it does not explicitly state the fact that notes will be readable by anyone on the internet.

It really sounds like the creators of the app didn't know that anyone could read the Gists...

Please read the comments above about the multiple ways that Kobble can be used. Our use of gists for openly sharing content was entirely intentional.

Having read through the information on your site now it's been updated, it's much clearer than it was before. I feel like it should have been closer to this before submitting to HN, but the changes ("Gists are not private, and are suitable for content that you want to share", "control" rather than "own") are definitely a step in the right direction.

Cheers! We're grateful for all the comments.

People probably would expect private gists to be reasonably private. They normally are, if you don't publish a global index of them...

This is not users misunderstanding how gists work.

We are trying to clarify the multiple ways Kobble can be used. Gists are for public data that you want to share. Private repos (coming soon) are for private data. I think the intros on the web make this clearer now.