1. Scope & contact
This policy covers the Note Android app by glumes (package com.glumes.note) and this website. For privacy questions, contact ezglumes@gmail.com. Local notes and checklists do not require a developer account.
2. Notes, images & local storage
Note stores note text, titles, checklists, tags, reminders, selected images, and preferences in app databases, files, or settings on your device. Normal editing does not upload your content to a developer-operated content server. Sharing, exporting, or enabling Google Drive sync sends the chosen data to the relevant destination. Android system backup is allowed; device backup or transfer may include app data depending on your system settings and provider.
3. Optional Google Drive backup & sync
When you connect Google, Google sign-in supplies basic account information (such as your name, email, account identifier, and profile picture information, depending on what Google returns). Note uses your email or account identifier to display and separate sync accounts. Google handles authentication; we do not receive your Google password. The drive.file scope permits access to specific files created by or authorized for this app, not your entire Drive.
Connecting can upload notes, checklists, tags, images, and sync identifiers, timestamps, and operation records to the NoteVaultLive folder in your own Google Drive. Sync can continue at app startup, after edits, or when manually requested. Google services on the device use access credentials; we do not receive them on a developer-operated server. Google processes storage and transmission under its own terms. You choose whether to connect your Google account and when to stop syncing or revoke access.
We use Google user data only to provide backup, restore, and sync, not for ad targeting, sale, or training general-purpose AI models. Note’s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4. Analytics, diagnostics & advertising identifiers
The current Release enables Google Analytics for Firebase and Firebase Crashlytics by default and has no separate in-app analytics opt-out switch. Analytics may process app-instance identifiers, device and OS information, app version, screen and feature events, installation source, and approximate location inferred from network information to understand usage. Crashlytics processes installation identifiers, crash traces, device and version information, and related diagnostics and event breadcrumbs to investigate problems. Current custom analytics events do not include note text, images, or checklist contents; diagnostic traces may include technical paths and error context.
The app retains the Google advertising SDK, advertising ID permission, and Android advertising-services declarations, but the current version does not enable ad display. No displayed ads does not mean no analytics collection: Firebase Analytics may still access the advertising ID where the system permits it. You can manage identifiers in Android’s privacy or advertising settings. If advertising is enabled later, we will update this policy and provide applicable privacy choices.
5. Permissions & biometrics
You select images with the system photo picker and read or write backup files with the system file picker. Reminders can use notification permission, exact-alarm access, and recovery after reboot. Internet, foreground data-sync, network-state, and wake-lock capabilities support online sync and background work. Android performs biometric authentication; Note does not read or store fingerprint or face templates. The app lock protects access on your device; it is not end-to-end encryption of notes or backup files. See Permissions.
6. Website & support email
This is a static website with no sign-in, upload forms, ads, analytics scripts, or application cookies. Images and styles are served by this site. Firebase Hosting processes request IP addresses to operate the service and prevent abuse; its current documentation describes IP retention as a few months. If you email us, we receive your address, message, and attachments you choose to send to answer, investigate, or handle a privacy request. Do not send passwords or unrelated full note backups.
7. Sharing, transfers & security
Google processes data for the features used (Drive, sign-in, Firebase, email, and hosting); content you share also goes to your chosen recipient. We do not sell notes or Google user data. Network requests use the providers’ encrypted transport, but processing may occur outside your country. We use the device app sandbox, system authentication, and provider security features. Exported ZIP backups and synced content do not have app-level end-to-end encryption; protect your copies. No system can be guaranteed absolutely secure.
8. Retention & deletion
Local content remains until you delete it or clear app data. Deleted items may first enter Trash. Release defaults to a five-day automatic trash-retention setting, which you can change or disable; actual cleanup depends on background scheduling. Emptying Trash or clearing app data is irreversible unless another copy exists.
Sync operation records and images may remain in Drive; deleting one note does not mean every historical copy has been physically erased. Disconnecting stops the connection but does not delete local content, cloud files, or the existing Google grant. To remove all cloud copies, disconnect on all devices, delete NoteVaultLive and older backup files in Google Drive, empty Drive Trash, and revoke Note’s connection in your Google Account. Delete exported files, shared copies, and Android system backups separately.
Google documents that Crashlytics generally retains data for 90 days before starting deletion; Analytics retention depends on project configuration and Google policies. Uninstalling is not equivalent to deleting telemetry already received. Support email is retained as needed to resolve requests, follow up, or meet applicable obligations. See data deletion steps.
9. Your choices & requests
You can use Note without connecting Drive, revoke optional system permissions, export your notes, or stop using the app. Depending on applicable law, you may have rights to access, correct, delete, restrict, or object to processing, and to complain to a local authority. Email ezglumes@gmail.com with the scope of your request. We may verify identity using only information necessary to handle it. We cannot directly access or delete content held only on your device or in your personal Drive, and may not be able to link telemetry without an account association to a particular person.
10. Minors & policy updates
Note is a general-purpose notes tool and currently has no child-specific accounts or child mode. For users below the local age of independent consent to data processing, a guardian should decide whether to use third-party online features. Contact ezglumes@gmail.com if you believe a minor’s personal information was improperly submitted. When features or data practices change, we will update this page’s date and, where appropriate, provide notice in the app or another suitable place.