Privacy Policy for Encrypted Notes

Last Updated: December 28, 2025

1. Introduction

This Privacy Policy describes how the app "Encrypted Notes" (hereinafter referred to as "the App") handles your data. The protection of your privacy is very important to us.

2. Data Controller

3. Fundamental Principle: No Data Collection

4. Local Data Storage

4.1 Notes and Content

• All notes are stored locally on your device in an encrypted SQLite database
• Encryption uses ChaCha20-Poly1305 and Scrypt key derivation
• Your notes never leave your device unless you manually export them

4.2 Media Attachments

• Images, audio recordings, and other attachments are stored locally in your device's app storage
• These files are encrypted when the note is password-protected
• No upload or external transmission takes place

4.3 Backups

• Backups are created locally on your device
• You have full control over the export and import of backups
• Backups contain your notes and attachments in JSON format
• Encrypted notes remain encrypted in the backup

5. Permissions

The app requires the following permissions:

5.1 Storage and Media Access

• READ_MEDIA_IMAGES: To attach images from your gallery to notes
• READ_MEDIA_AUDIO: To attach audio files to notes
• RECORD_AUDIO: To create voice recordings directly in the app

Important: These permissions are used exclusively to add media selected by you to your notes. There is no automatic access to your media or transmission to external servers.

6. No External Data Transmission

The app:

• Does not send data to external servers
• Does not contact APIs or web services
• Contains no tracking or analytics software
• Contains no advertising
• Does not use cloud services
• Does not share data with third parties

7. Encryption and Security

• Notes can be password-protected
• Encryption uses modern cryptographic algorithms:
  • ChaCha20-Poly1305 for symmetric encryption
  • Scrypt for password-based key derivation
• Encrypted notes can only be read with the correct password
• Passwords are not stored - if you forget your password, notes cannot be recovered

8. Data Sharing

Since no data is collected or transmitted, there is also no sharing with third parties.

9. Your Rights

Since we do not collect or process personal data, there are no GDPR-related obligations regarding:

• Right of access
• Right to rectification
• Right to erasure
• Right to data portability

You always have full control over your data:

• All data is exclusively on your device
• You can uninstall the app at any time, which deletes all local data
• You can delete individual notes at any time
• You can create backups and keep or delete them at your discretion

10. Data Security

The security of your data is your responsibility:

• Protect your device with a secure lock screen
• Use strong passwords for encrypted notes
• Create regular backups and keep them secure
• In case of device loss, only password-protected notes are protected from access

11. Children

The app is suitable for all age groups. Since no data is collected, there are no special requirements regarding use by minors.

12. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy. Changes will be communicated through app updates. The current version can always be found at:
https://seljak-solutions.github.io/encrypted-notes-privacy-policy/privacy-en.html

13. Contact

If you have questions about privacy, you can contact us:

---