Privacy Policy

Last Updated: October 8, 2026

1. Introduction and Scope

This Privacy Policy explains how HEVIN TECHNOWEB LLP (“we”, “us”, or “our”) handles information in connection with the Android application Notes: Notepad & Notebook (the “App”).

The App is a notes app for notepad, to-do lists, checklists, and quick reminders. It does not require you to create an account or provide personal information. Any data recovery operations are performed locally on your device.

This Privacy Policy applies to your use of the App and is designed to align with Google Play Developer Program Policies (including User Data and Data Safety requirements), the General Data Protection Regulation (GDPR) in the European Union, the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA), and the California Online Privacy Protection Act (CalOPPA).

By using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

2. Information We Collect

We do not require you to create an account or provide personal information such as your name, email address, phone number, or payment card details directly to us.

Information stored only on your device (local data):

• Notes, checklists, to-do items, and photo attachments you create.

• App settings such as theme, accent colour, language, and sort order.

• This data is stored in a local SQLite database (via Room) and preferences (via DataStore) on your device. It is not sent to our servers or any third-party server by the App.

Information collected through third-party services (anonymous / non-identifying):

• Crash reports via Firebase Crashlytics (device and app information needed to diagnose stability issues; reports do not personally identify you).

• Anonymous app-usage data via Firebase Analytics (feature engagement and similar metrics to help improve the App). Advertising-ID collection is switched off and the AD_ID permission is not declared.

• Limited non-personal purchase or subscription status information from Google Play so we can unlock premium features.

• Data related to advertising (when ads are shown) processed by Google AdMob, Google AdX, and Meta (Facebook) advertising services according to their own policies.

We do not collect precise location, contacts, microphone audio, or other sensitive personal data beyond what is described above.

3. Legal Bases for Processing (GDPR)

Where the GDPR applies, we process information on the following legal bases:

• Legitimate interests – to maintain App stability (Crashlytics), understand feature usage (Analytics), show relevant ads, and provide in-app purchases.

• Consent – where required for advertising, analytics, or certain permissions (you can withdraw consent by adjusting device settings or uninstalling the App).

• Contract – to deliver the App’s core features and any purchased premium content.

• Legal obligation – when we must comply with applicable law or valid legal requests.

4. Permissions We Use in Our App and Why

The App requests only the following Android permissions. Each is used solely for the stated purpose and is activated only when needed:

• Camera (android.permission.CAMERA)
  Used when you explicitly tap “Photo” and then “Camera” inside a note to take a new photo that is stored locally in the App. Camera access is not used at any other time. Choosing an existing photo uses Android’s system photo picker, which requires no permission.

• Internet (android.permission.INTERNET) and Access Network State (android.permission.ACCESS_NETWORK_STATE)
  Required so Firebase Crashlytics can send crash reports and Firebase Analytics can send anonymous usage statistics. The App makes no other network calls for its core note-taking features.

• Wake Lock (android.permission.WAKE_LOCK)
  Added by Firebase. It keeps the device awake only briefly while a crash report finishes sending.

• Install Referrer (com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE)
  Added by Firebase Analytics to record where an install originated (for example, a Play Store campaign). This helps measure the effectiveness of distribution without identifying individual users.

Permissions we do NOT request:

• Advertising ID (com.google.android.gms.permission.AD_ID is removed from the manifest)

• Storage or media access beyond the system photo picker

• Notifications

• Location

• Microphone

• Contacts

• Phone state

• Draw over other apps

• Billing (handled entirely by Google Play)

You can review and revoke any granted permission at any time in your device’s Settings > Apps > Notes: Notepad & Notebook > Permissions.

5. Data Storage and Security

• All notes, checklists, photo attachments, and app settings are stored locally on your device only. Nothing leaves your device through our application for these core features.

• We use industry-standard practices provided by the Android platform and the libraries we employ (Room, DataStore, etc.) to protect local data.

• Firebase services encrypt data in transit using HTTPS.

• We do not claim that any system is 100% secure. You are responsible for keeping your device secured with a lock screen, up-to-date software, and safe practices.

Because core data never leaves the device through the App, data recovery is performed only on the device itself.

6. Third-Party Libraries & SDKs Used in Our App

We use the following libraries and services. Links to their privacy policies or terms are provided so you can review them:

• Firebase Crashlytics (com.google.firebase:firebase-crashlytics via firebase-bom)
  Collects crash reports so we can find and fix stability issues. Reports do not personally identify the user.
  Privacy information: Firebase Privacy and Security

• Firebase Analytics (com.google.firebase:firebase-analytics via firebase-bom)
  Collects unidentified app-usage data (feature engagement) to improve the App. Advertising-ID collection is switched off.
  Privacy information: Firebase Privacy and Security and Google Privacy Policy

• Google Play In-App Review (com.google.android.play:review-ktx)
  Used only to show Google Play’s native “rate this app” prompt inside the App.
  Subject to Google Privacy Policy and Google Play Terms of Service

• Room (androidx.room)
  Stores notes, checklists, and photo attachments in a local SQLite database on the device. Nothing is sent to a server.

• DataStore (androidx.datastore:datastore-preferences)
  Stores app settings (theme, accent colour, language, sort order) locally on the device.

• Coil (io.coil-kt:coil)
  Displays photo thumbnails from files already on the device.

• ExifInterface (androidx.exifinterface)
  Reads a photo’s orientation so it displays correctly.

• kotlinx-serialization
  Converts note content to/from JSON for local storage and the “Save backup to file” feature.

• Kotlin Coroutines
  Runs database and file work off the main thread for better performance.

• AndroidX and Material libraries (AppCompat, Core KTX, Material Components, ConstraintLayout, RecyclerView, Activity/Fragment KTX, Lifecycle, SwipeRefreshLayout, SplashScreen, etc.)
  Standard Google UI and lifecycle libraries. No data collection of their own.

• Core library desugaring
  Build-time support only; no runtime service or data collection.

Advertising-related SDKs (when ads are shown):

• Google AdMob / Google AdX – subject to Google Privacy Policy and Google’s advertising policies.

• Meta (Facebook) Audience Network or related advertising services – subject to Meta Privacy Policy.

We do not use Firebase Messaging, Firestore, Performance Monitoring, Remote Config, or User Messaging Platform (consent) SDKs beyond what is listed.

7. Advertising, Analytics, and Tracking Technologies

The App shows advertisements using Google AdMob, Google AdX, and Meta (Facebook) advertising services.

These services may collect or process device identifiers, IP address, approximate location derived from IP, app usage information, and other data as described in their respective privacy policies in order to serve ads, measure ad performance, and (where permitted) personalise ads.

Firebase Analytics is used for anonymous usage statistics. Advertising-ID collection is switched off in our configuration.

You can limit ad personalisation through your device settings (Google settings > Ads, or equivalent on your device) and through any consent choices presented by the ad networks.

8. Cookies and Similar Technologies

The App itself does not use traditional browser cookies. However, the advertising and analytics SDKs listed above may use device identifiers, local storage, or similar technologies for the purposes described in their privacy policies.

9. Detailed Information on the Processing of Your Personal Data

Category of data

Source

Purpose

Shared with

Retention

Notes, checklists, photos

You (on device)

Provide App features

Not shared

Until you delete or uninstall

App settings

You (on device)

Personalise App experience

Not shared

Until you delete or uninstall

Crash reports

Device / App

Improve stability

Google (Firebase)

According to Firebase retention

Anonymous usage events

Device / App

Improve features

Google (Firebase Analytics)

According to Firebase retention

Ad-related identifiers

Device / ad SDKs

Serve and measure ads

Google AdMob/AdX, Meta

According to ad network policies

Purchase / subscription status

Google Play

Unlock premium features

Google (limited non-personal data)

As needed for entitlement

We do not sell personal information. We do not share your notes or other local content with third parties.

10. Data Retention and Deletion

• Local notes, checklists, photos, and settings remain on your device until you delete them inside the App or uninstall the App.

• Crash and analytics data are retained by Google according to Firebase’s retention periods.

• Advertising data is retained according to the policies of Google and Meta.

• To delete all associated data from your device, simply uninstall the App.

11. Payment Terms and In-App Purchases

The App offers in-app purchases and/or paid subscriptions.

All payments and subscriptions are handled safely by Google Play Billing. We do not collect, store, or see your payment details such as card information or Google account passwords.

Subscriptions:

Subscriptions renew automatically unless you cancel them before the next billing date. You can manage or cancel your subscription anytime from your Google Play account settings. If you cancel, you will continue to enjoy premium features until the current billing period ends.

Purchase Information:

Google may share limited, non-personal purchase details with us, such as subscription status or validity, so we can unlock premium features.

Refunds & Cancellations:

All refund requests must be made through Google Play, following Google Play’s refund rules.

Third-Party Sharing:

We do not share your purchase or subscription information with any third parties, except when required by Google for payment verification.

Policies:

All in-app purchases and subscriptions follow the Google Play Terms of Service and Google Privacy Policy.

12. User Rights Under GDPR

If you are in the European Economic Area, United Kingdom, or Switzerland, you have the right to:

• Access the personal data we process about you

• Rectify inaccurate data

• Erase data (“right to be forgotten”)

• Restrict or object to processing

• Data portability

• Withdraw consent at any time

• Lodge a complaint with your local supervisory authority

Because most of your data stays only on your device, many of these rights are exercised by managing or deleting content inside the App or uninstalling it. For data held by Firebase or advertising partners, you may contact us and we will assist as far as reasonably possible.

13. User Rights Under CCPA/CPRA

If you are a California resident, you have the right to:

• Know what personal information is collected, used, shared, or sold

• Delete personal information

• Opt out of the sale or sharing of personal information (we do not sell personal information)

• Non-discrimination for exercising your rights

• Correct inaccurate personal information

• Limit the use of sensitive personal information

To exercise these rights, contact us using the details in the Contact Us section. We will respond in accordance with applicable law.

14. “Do Not Track” (CalOPPA)

The App does not currently respond to Do Not Track (DNT) signals because there is no consistent industry standard for DNT. You can control tracking-related identifiers through your device settings and the privacy controls offered by Google and Meta.

15. International Data Transfers

Firebase and Google services may process data in the United States or other countries. Google provides appropriate safeguards (such as Standard Contractual Clauses) for transfers of personal data from the EEA, UK, and Switzerland. Meta may also transfer data internationally under its own safeguards. By using the App you acknowledge that such transfers may occur.

16. Protection from Malware and Network Misuse

We design the App to follow Android security best practices. We do not intentionally include malware or engage in network misuse. You should keep your device and the App updated and only download the App from the official Google Play Store.

17. Links to Other Websites and Apps

The App may contain links to third-party websites or services (for example, Google Play, Firebase documentation, or privacy policy pages). We are not responsible for the privacy practices of those third parties. Their own privacy policies apply.

18. Children’s Privacy

The App does not target or attract children under the age of 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

19. Compliance with Legal Obligations and Law Enforcement

We may disclose information if required by law, court order, or valid legal process, or to protect the rights, property, or safety of HEVIN TECHNOWEB LLP, our users, or the public.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top will change when we do. Continued use of the App after changes means you accept the updated policy. We encourage you to review this page periodically.

21. Contact Us

If you have questions about this Privacy Policy or wish to exercise any privacy rights, please contact us:

Email: contact.hevintechnowebllp@gmail.com

Developer / Company: HEVIN TECHNOWEB LLP

Address: Gujarat, India

We will respond to your inquiry as soon as reasonably possible.