onetap-notes-privacy

Privacy Policy

Last updated: May 26, 2026

This Privacy Policy describes how Notui (“we”, “our”, or “the app”) handles information when you use our Android application. We are committed to protecting your privacy and being transparent about data practices, including those of third-party services embedded in the app.

1. Information We Collect

1.1 Information You Provide

Note content — text notes, checklists, and any other content you create within the app. This data is stored locally on your device only using a local database (Room/SQLite). We do not transmit your note content to any server we operate.

1.2 Microphone and Audio Recording

Our application requests access to the device microphone (android.permission.RECORD_AUDIO) to provide its core voice note functionality.

Collection: Audio is recorded only when you explicitly trigger the recording feature. We do not record in the background.
Storage: All audio recordings and any transcribed text are stored locally on your device only.
Sharing: We do not upload, transmit, or share your audio data with our servers or any third parties.

1.3 Information Collected Automatically

We use Firebase Analytics to understand how the app is used. The following information may be collected automatically by third-party SDKs described in Section 3:

App events and screen views
Device information (model, OS version, language, country)
Crash reports and diagnostic data
Advertising identifiers
Session and engagement metrics

2. How We Use Information

We use collected information to:

Provide and maintain app functionality
Save and manage your notes
Enable voice recording features
Improve app performance and stability
Analyze usage patterns to improve user experience
Display advertisements
Process in-app purchases and subscriptions

Your note content is used solely to provide the core functionality of the app. It is never read, transmitted, sold, or shared by us.

3. Third-Party SDKs and Services

The app integrates the following third-party SDKs. Each operates under its own privacy policy and may collect data independently of us.

3.1 Google Mobile Ads (AdMob)

Library: com.google.android.gms:play-services-ads
Purpose: Displaying advertisements within the app.

AdMob is operated by Google LLC. To serve ads and measure their performance, it may collect:

Advertising ID (Google Advertising ID / GAID) — a resettable device identifier used for ad targeting and measurement.
Approximate or precise location — if location permissions have been granted to the device or app, AdMob may use location signals to serve geographically targeted ads. Even without explicit location permission, IP-based approximate location may be inferred.
Device information — device model, OS version, screen resolution, language, and time zone.
App activity — interactions with ads (impressions, clicks).
IP address — used for fraud prevention and approximate geolocation.
Interest and behavioral signals — Google may build ad profiles based on your broader activity across apps and websites (personalized advertising), unless you opt out via your device’s ad settings.

How to limit AdMob data collection:

On Android, go to Settings → Privacy → Ads and enable “Opt out of Ads Personalization” to disable interest-based advertising.
You can reset your Advertising ID at any time from the same menu.

Google’s Privacy Policy: https://policies.google.com/privacy
Google’s Ads Data practices: https://policies.google.com/technologies/ads

3.2 RevenueCat

Libraries: com.revenuecat.purchases:purchases, com.revenuecat.purchases:purchases-ui
Purpose: Managing in-app subscriptions, purchase verification, and displaying paywall screens.

RevenueCat is a subscription management platform. When you use subscription or paywall features, RevenueCat may collect:

Anonymous user identifier — RevenueCat assigns a random user ID to track subscription state. No name or email is required or collected by default.
Purchase and subscription data — purchase tokens, subscription status, product identifiers, and transaction history received from Google Play.
Device and app metadata — device model, OS version, app version, locale, and SDK version, used for debugging and analytics.
IP address — logged server-side during API calls for fraud prevention and rate limiting.

RevenueCat does not collect payment card details (those are handled entirely by Google Play). RevenueCat does not access your note content.

RevenueCat’s Privacy Policy: https://www.revenuecat.com/privacy

3.3 Google Play Billing

Library: com.android.billingclient:billing-ktx
Purpose: Processing in-app purchases and subscriptions through the Google Play Store.

All payment transactions are handled directly by Google Play. We receive only a purchase token (a non-sensitive identifier confirming a completed purchase) — we never see, store, or process your payment card information, bank details, or billing address.

Google Play’s Terms of Service: https://play.google.com/about/play-terms/index.html

3.4 Firebase Analytics

Service: Google Firebase Analytics
Purpose: Understanding app usage patterns and improving the user experience.

Firebase Analytics is operated by Google LLC. It may collect:

App events — screen views, feature interactions, and custom events logged by the app.
Firebase Installation ID (FID) — a pseudonymous per-app-install identifier used to associate events with a single installation.
Advertising ID (GAID) — used to link analytics data with ad campaigns, if applicable.
Device and app metadata — device model, OS version, app version, language, and country.
IP address — used to derive country/region at collection time, then discarded by Google.
Session and engagement data — session duration, retention metrics, and user engagement signals.

Firebase Analytics does not collect your note content. Data is aggregated and used to understand how users interact with the app as a whole.

Firebase Privacy and Security: https://firebase.google.com/support/privacy
Google’s Privacy Policy: https://policies.google.com/privacy

3.5 Firebase Crashlytics

Service: Google Firebase Crashlytics
Purpose: Detecting, diagnosing, and fixing app crashes to improve stability.

Firebase Crashlytics is operated by Google LLC. When a crash or non-fatal error occurs, it may collect:

Crash reports — stack traces, thread states, and the sequence of events (breadcrumbs) leading up to the crash.
Device state at crash time — device model, OS version, available memory, battery level, and orientation.
Firebase Installation ID (FID) — used to deduplicate crash reports from the same installation.
App version — to correlate crashes with specific releases.
Custom logs and keys — non-personal diagnostic values optionally set by the app to aid debugging.

Crashlytics does not collect your note content or any information you have typed. Reports are used solely for debugging and improving app stability.

Firebase Privacy and Security: https://firebase.google.com/support/privacy

4. Data Storage and Security

Data type	Where stored	Who can access
Notes and checklists	Device local storage only	You only
Subscription status	RevenueCat servers	RevenueCat, us (read-only)
Purchase tokens	Google Play / RevenueCat	Google, RevenueCat, us
Ad identifiers & signals	Google servers	Google
App analytics events	Firebase / Google servers	Google, us (aggregated)
Crash reports	Firebase / Google servers	Google, us

We do not operate servers that store your personal data or note content. Data held by third-party services is subject to their respective security practices and retention policies.

We do not sell, rent, or share your personal information with third parties for their own marketing purposes. Data shared with third-party SDKs (Google, RevenueCat) is shared solely for the purposes described above and is governed by those parties’ own privacy policies.

We may disclose information if required by law, court order, or to protect our legal rights.

6. Children’s Privacy

The app is not directed to children under the age of 13 (or 16 where applicable under GDPR). We do not knowingly collect personal information from children. If you believe a child has provided personal information through the app, please contact us so we can take appropriate action.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access — request a copy of the data held about you.
Deletion — request deletion of your personal data. Note that data held by Google (AdMob, Firebase) or RevenueCat must be requested directly from those services.
Opt-out of personalized advertising — use your device’s ad settings (see Section 3.1).
Data portability — receive your data in a portable format where applicable.

GDPR (EEA/UK users): You have rights under the General Data Protection Regulation, including the right to lodge a complaint with your local supervisory authority.

CCPA (California users): You have the right to know what personal information is collected, to delete it, and to opt out of its sale. We do not sell personal information.

To exercise any of these rights, contact us at the address below. For data held by Google (AdMob, Firebase Analytics, Crashlytics) or RevenueCat, please contact those services directly using the links in Section 3.

8. Retention

Note data remains on your device until you delete it or uninstall the app.
RevenueCat data is retained as described in RevenueCat’s privacy policy (typically for the duration of your subscription relationship plus a reasonable period thereafter).
Firebase Analytics data is retained for up to 14 months by default, as described in Google’s Firebase documentation.
Firebase Crashlytics data is retained for 90 days, as described in Google’s Firebase documentation.
Google/AdMob data is retained as described in Google’s privacy policy.

9. Data Deletion

You can delete your notes, checklists, and audio recordings at any time directly within the app. If you uninstall the application, all locally stored data associated with the app will be removed from your device.

For data held by third-party services (Google/Firebase, RevenueCat), please submit a deletion request directly to those services using the links provided in Section 3.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at:

Email: notui.ai.app@gmail.com

This Privacy Policy applies to the Notui Android application.