GreenLeaf Flow
Privacy Policy
NoteStick for Android
Last updated: August 3, 2026
Effective immediately
The Short Version
NoteStick is designed to keep your notes private. Your data lives on your device by default. Optional cloud synchronization applies to note and sticker text only. Attached images remain stored locally and are not uploaded through cloud sync. We do not sell or monetize your personal data.
01 - Overview
Who we are and what this policy covers
NoteStick ("the app") is developed and maintained by GreenLeaf Flow. This Privacy Policy explains what information we collect, how we use it, how it is stored, and the choices you have regarding your data when you use NoteStick on Android.
By using NoteStick, you agree to the practices described below. If you do not agree, please discontinue use of the app.
02 - Data We Collect and Process
Only what is necessary for the features you choose to use
NoteStick processes a minimal set of information, and only when you actively choose to use specific features.
Google Account
If you sign in with Google, NoteStick may receive your Firebase account identifier, display name, email address, and profile photo URL. This information is used for authentication, account isolation, Pro entitlement status, and optional cloud synchronization of note and sticker text.
Guest users do not provide Google account information. A device-local guest identifier may be generated to keep local guest data separated from data belonging to signed-in accounts.
Notes and Stickers
The text content you write in notes and stickers is stored locally by default. If cloud synchronization is enabled, note and sticker text is encrypted within the app before upload to Google Firestore. Attached images are handled separately and are not included in cloud synchronization.
Attached Images and Camera
NoteStick allows you to attach images to the Body of a note by selecting images through the operating system's photo picker or by taking a new photo with the camera. Access occurs only after an explicit action by you. NoteStick does not request broad access to your photo library.
Selected or captured images are copied into the app's private local storage. NoteStick creates a compressed copy and a smaller thumbnail to improve performance. Sensitive EXIF metadata, including location information where available, is removed during image processing. The original image in your photo library is not modified or deleted.
NoteStick stores limited attachment metadata locally, including an attachment identifier, account or guest identifier, note identifier, file type, image dimensions, file size, display order, and creation or modification timestamps.
Attached images are currently local-only. They are not included in cloud synchronization and are not uploaded to Firebase, Google Drive, advertising services, or analytics services.
Device Storage
Notes, stickers, settings, and attachment metadata are stored locally using Hive. Attached image files and thumbnails are stored in the app's private storage area. NoteStick does not collect hardware identifiers for its own backend. Google AdMob may collect advertising or device identifiers as described in Section 06.
Purchase Status
NoteStick may store the resulting Pro entitlement status locally and, where applicable, in Firebase. Payment card details and other payment credentials are processed by Google Play and are not received or stored by NoteStick or GreenLeaf Flow.
03 - Data We Do Not Collect
GreenLeaf Flow does not access or store the following for its own purposes:
- Precise location data from GPS or network-based location services.
- Microphone recordings or microphone access.
- Financial or payment credentials. In-app purchases are handled by Google Play.
- Analytics or behavioral tracking operated by GreenLeaf Flow. Google AdMob may collect device identifiers or usage signals for advertising, as described in Section 06.
- Crash reports or diagnostic logs sent to GreenLeaf Flow servers.
- Contacts, call logs, or SMS data.
Camera access occurs only when you explicitly choose to take a photo for attachment to a note. Photo access is limited to items you explicitly select through the operating system's picker.
04 - Encryption and Security
Application-Level Encryption for Cloud Text Synchronization
When cloud synchronization is enabled, NoteStick encrypts note and sticker text within the app before uploading it to Google Firestore. The current implementation is described as application-level encryption and is not represented as end-to-end encryption. Google and Firebase security controls also apply to data stored or transmitted through their infrastructure.
Attached images are not uploaded through cloud synchronization. They remain in the app's private local storage unless you manually include them in a local backup export as described in Section 05.
Cloud synchronization is disabled by default. Your note and sticker text remains entirely on your device until you explicitly enable synchronization in the app settings.
No method of electronic storage or transmission is completely secure. GreenLeaf Flow uses reasonable technical measures appropriate to the app's current design but cannot guarantee absolute security.
05 - Data Storage, Cloud Synchronization, and Local Backup
Local Storage
All notes and stickers are stored locally on your device using Hive, a lightweight local database. Attached images are stored as files in the app's private storage area, with attachment metadata stored locally. No internet connection is required to use the app's core note and image features.
Cloud Synchronization
If you enable cloud synchronization, encrypted note and sticker text is stored in Google Firestore on Google's infrastructure. Attached images are not uploaded to Firestore or Google Drive and are not included in cloud synchronization.
Disabling synchronization stops future synchronization but does not automatically delete data previously stored in Firestore. Google's security and privacy controls apply to its infrastructure.
Optional Local Backup and Device Transfer
You may manually export your NoteStick data, including notes and attached images, as a .notestick backup file. You select the destination through the operating system's file picker. The destination may include local device storage, a USB device, or a third-party storage provider made available by the operating system.
NoteStick does not automatically upload backup files. A .notestick backup is not currently protected by a separate password or end-to-end encryption. Anyone who obtains access to the backup file may be able to read its contents. You should keep backup files in a secure location and transfer them only to devices or storage providers you trust.
Importing a backup merges supported data into the app. NoteStick performs integrity checks on backup contents, but integrity checking is not encryption and does not prevent someone who has the backup file from reading it.
Deleting NoteStick does not delete previously exported backup files. You must delete those files using your device's file manager or the service where you chose to store them. If you choose a third-party storage provider, that provider's privacy policy and security practices apply.
06 - Advertising
Ads are served only on the free tier
NoteStick uses Google AdMob to display advertisements to users on the free plan. AdMob may collect certain device identifiers and usage signals to provide, limit, measure, and protect advertising in accordance with Google's Privacy Policy:
https://policies.google.com/privacy
Attached images and note content are not provided to Google AdMob for advertising or analytics purposes.
Pro users have no ads. Upgrading to NoteStick Pro through Google Play removes advertising while the Pro entitlement remains valid for the account or purchase configuration supported by the app.
GreenLeaf Flow may receive aggregated advertising and revenue reports from Google AdMob.
07 - Third-Party Services and Data Processing
GreenLeaf Flow does not sell, rent, or trade your personal data for marketing or commercial purposes. The following third-party services may process limited information when the related feature is used:
Google Firebase Authentication and Google Sign-In
Used for authentication. NoteStick may receive your Firebase account identifier, display name, email address, and profile photo URL.
Google Firestore
Stores encrypted note and sticker text when cloud synchronization is enabled. Attached images are not stored in Firestore or Google Drive.
Google AdMob
Serves advertisements to free-tier users. AdMob may process advertising identifiers, device information, IP address, and usage signals according to Google's own privacy policies and consent requirements.
Google Play Billing
Handles in-app purchases. GreenLeaf Flow does not receive payment card details. NoteStick stores only the resulting Pro entitlement status needed to provide purchased features.
User-Selected Storage Providers
The operating system's file picker is used only when you explicitly export or import a .notestick backup. The destination may be local storage, USB storage, or a third-party storage provider selected by you. NoteStick does not control the privacy or security practices of a provider you select, and that provider's privacy policy applies.
08 - Children's Privacy
Not directed at children under 13
NoteStick is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe that a child has provided us with personal information, please contact us immediately and we will take reasonable steps to delete that information.
09 - Your Rights and Controls
You are in control
Depending on the feature, you may exercise the following controls through the app or by contacting GreenLeaf Flow:
- Disable cloud synchronization. This stops future text synchronization. Data previously synchronized to Firestore may remain until it is deleted or an account deletion request is completed.
- Delete individual notes. Deletion of synchronized note text is sent to Firestore when synchronization is available.
- Delete attached images from a note. Because attached images are local-only, deletion removes the app-managed local copies according to the app's deletion process.
- Sign out. This disconnects your Google account from the current app session and keeps account data isolated from other users or guest data on the device.
- Delete the app. This removes data stored in the app's private local storage, subject to the operating system's behavior. It does not delete exported .notestick backup files or data previously stored in cloud services.
- Delete exported backups. Use your device's file manager, USB device, or selected storage provider to delete backup files stored outside the app.
- Request account and cloud-data deletion. Email green.leaf.flow.support@gmail.com with the subject "Data Deletion Request." GreenLeaf Flow will process deletion of associated cloud data within 30 days after reasonably verifying the request.
10 - Data Retention
Local data is retained in the app's private storage until you delete the relevant content, clear the app's data, or uninstall the app, subject to the operating system's behavior.
Cloud-synchronized text data is retained until it is deleted through the app's supported synchronization process or through a verified account deletion request. Exported backup files are retained wherever you chose to save them until you delete them yourself.
11 - Changes to This Policy
GreenLeaf Flow may update this Privacy Policy from time to time. When we do, the "Last updated" date at the top of this page will be revised. For significant changes, we may provide an in-app notice or another appropriate notice. Continued use of NoteStick after an updated policy becomes effective constitutes acceptance of the updated policy where permitted by applicable law.
12 - Contact
Questions or concerns?
If you have questions about this Privacy Policy, how your data is handled, or a data deletion request, please contact:
GreenLeaf Flow
Developer of NoteStick
Email: green.leaf.flow.support@gmail.com
Copyright 2026 GreenLeaf Flow. All rights reserved.
NoteStick - com.notestick.app - Android