Privacy Policy

NotePi is a private, local-first note-taking app. This page explains — in plain language — what NotePi does with your information.

Effective date: September 18, 2026

The short version

Your notes never leave your device unless you explicitly export or back them up yourself.
No account, no ads, no analytics, no tracking. We don't collect or transmit personal data.
Everything — notes, checklists, calculations, attachments — is stored in a local database on your phone.
Locked notes are encrypted with AES-256; the key never leaves your device's secure hardware.

1. What information NotePi collects

None. NotePi is designed as a local-first app:

No user account is required — there is no sign-up, no login, no email address collected.
No analytics or telemetry. NotePi contains no analytics SDKs and does not collect usage statistics, crash identifiers, device fingerprints, or advertising identifiers.
No advertising. NotePi shows no ads and shares nothing with advertising networks.

You can verify this yourself: the app works fully in airplane mode, and its release build makes no network requests unless you explicitly use the (currently optional) backup feature described in section 5.

2. Where your data lives

All content you create in NotePi is stored locally on your device:

Notes, collections, tags, reminders, and settings are stored in a SQLite database in the app's private storage area (Android app sandbox).
Attachments (images and files you add to notes) are stored as files in the app's private storage.
Home-screen widget data (titles of your pinned notes) is stored in the app's private shared storage so the widget can display it. It never leaves the device.
Content shared into NotePi from other apps (text, images, files via the system share sheet) is stored locally as note content, exactly like anything you type.

Because this storage is app-private, uninstalling NotePi deletes all of it from your device (subject to normal Android behavior for app data). You can also delete individual notes in the app; deleted notes go to the Trash and are permanently purged after 30 days.

3. Android permissions and why NotePi uses them

Permission	Why NotePi needs it
`POST_NOTIFICATIONS`	To show reminder notifications for notes you attach a reminder to. Requested at runtime; entirely optional — the app works without it.
`RECEIVE_BOOT_COMPLETED`	To reschedule your reminder notifications after the device restarts. No data is read or sent.
`USE_BIOMETRIC`	To unlock notes you have chosen to lock, using the device's built-in biometric prompt. NotePi never sees or stores your fingerprint/face data — the operating system only tells the app "matched" or "not matched".
`INTERNET`	Required by Android for the optional Google Drive backup feature (see section 5). In the current release this feature is disabled and NotePi makes no network requests.

4. Locked notes and encryption

Notes you mark as locked are encrypted on your device with AES-256. The encryption key is generated once and stored in the platform's secure enclave (Android Keystore). It never leaves your device, is never backed up, and is not accessible to us as developers.

Consequence: if the device keystore is wiped (e.g. all biometrics removed and security reset, or app data cleared), locked content cannot be recovered by anyone — including us. This is by design.

5. Optional Google Drive backup

NotePi contains an optional Google Drive backup feature. It is disabled in the current release and hidden from the interface. When it becomes available in a future version:

It activates only if you explicitly connect your Google account.
It uses Google Sign-In with the drive.appdata scope, which can only access a hidden, app-private folder in your Drive. NotePi cannot see, read, or modify any other file in your Google Drive.
The backup is a single rolling file (notepi_backup.json) in that hidden folder.
Your use of Google Drive is governed by Google's Privacy Policy.

Regardless of this feature, NotePi's default state is: everything stays on your device.

6. Export, backup and sharing — you choose

NotePi includes a local JSON export/restore feature. Exports only happen when you tap the export action, and the file is handed to the standard Android share/save UI — you decide where it goes (Files, email, Drive, a chat app, …). That destination's own privacy policy applies to the exported copy.

7. Third-party services

NotePi has no third-party analytics, crash-reporting, or advertising providers. The only third-party service involved in any feature is Google Drive, and only for the optional, user-initiated backup described in section 5. Opening external links you tap in notes happens in your browser and is governed by your browser's and that site's policies.

8. Children's privacy

NotePi is a general-audience utility and is not directed at children under 13. Because the app collects no personal information from anyone, it does not knowingly collect personal information from children.

9. Security

Since your data is stored only on your device, its security follows your device's security: set a device lock and keep your OS up to date. Within the app, locked notes add AES-256 encryption with hardware-backed keys. There are no NotePi servers that could be breached to expose your notes — we have no servers.

10. Changes to this policy

If we change this policy, we will update this page and change the effective date above. Significant changes will also be mentioned in the app's release notes on Google Play. The data collected by older versions is not retroactively affected by new features you don't use.

11. Contact

Questions or concerns about this policy or NotePi's privacy practices?

TODO before publishing: replace the placeholder below with your real contact address.

Email: beefiny.news7@gmail.com