Privacy policy

Notes for Android · Effective 21 October 2026

Notes is built so that your notes are readable only by you. This policy explains, in plain words, what the app does with data. The app is developed by Prabhat Tiwari ("we").

The short version

• Your notes stay on your phone, encrypted, unless you turn on sync.
• If you turn on sync, notes are encrypted on your phone before upload. We cannot read them.
• No ads, no analytics, no tracking, no selling of data. No account with your name or email.

Data stored on your device

Notes, checklists, labels, notebooks, images, sketches and attachments are stored in the app's private storage. Each note and each attachment is encrypted with AES-256-GCM. The encryption key is itself protected by the Android Keystore and, if you set one, by your PIN, password, fingerprint or YubiKey. Notes you lock individually get an extra layer of encryption with their own password.

Settings such as your theme and font are stored on the device. Uninstalling the app deletes all of this data.

End-to-end encrypted sync (optional)

Sync is off by default. If you turn it on, the app derives keys from your sync passphrase on your phone using Argon2id. Notes and attachments are encrypted on your phone and only the encrypted data is sent to our sync server (a Cloudflare Worker with a Cloudflare D1 database). Your passphrase and keys never leave your device.

What the server can see: a random account identifier, the number and size of encrypted items, hashed item identifiers, and when they were uploaded. Like any web service, Cloudflare processes your IP address to deliver the connection. What the server cannot see: the content of any note, titles, labels, attachments or your passphrase.

Important: because we never have your keys, we cannot reset your passphrase. When you set up sync you are shown a recovery key. If you lose both your passphrase and your recovery key, your synced data cannot be recovered by anyone. Your notes on the phone are not affected.

You can delete your sync account from inside the app at any time; this removes your encrypted data from the server. You can also point the app at your own sync server.

Backups

Backup files you export are encrypted with a password you choose. Where you save or send them is up to you. Android's automatic cloud backup is disabled for this app.

Permissions

• Internet: only for sync, if you turn it on.
• Biometric: to unlock with your fingerprint or face. Biometric data never reaches the app.
• NFC: to talk to a YubiKey.
• Notifications, alarms and start on boot: to show reminders you set, at the right time, even after a restart.

Children

Notes is not directed at children under 13 and collects no personal information from anyone.

Changes

If this policy changes, the new version will be posted on this page with a new effective date.

Contact

Questions: contact@example.com

संक्षेप में (हिन्दी)

आपके नोट्स आपके फ़ोन पर एन्क्रिप्टेड रहते हैं। सिंक वैकल्पिक है; चालू करने पर नोट्स फ़ोन पर ही एन्क्रिप्ट होकर भेजे जाते हैं, इसलिए हम उन्हें पढ़ नहीं सकते। कोई विज्ञापन या ट्रैकिंग नहीं। पासफ़्रेज़ और रिकवरी की दोनों खो जाने पर सिंक किया गया डेटा कोई वापस नहीं ला सकता।