Privacy Policy
Noted — Last updated: June 2026
Summary
Noted does not collect, transmit, or share any user data. Everything you create in the app stays on your device.
Data Collection
Noted collects no data whatsoever. No personal information, no analytics, no telemetry, no crash reports, no advertising identifiers, no location data. The app does not have the INTERNET permission and is technically incapable of transmitting data off your device.
Data Storage
All data you create — notes, collections, images, drawings, and voice recordings — is stored locally on your device and encrypted at rest. Notes, collections, and drawing data are held in a database encrypted with AES-256 via SQLCipher; images, rendered drawings, and voice recordings are stored as separate files, each encrypted with AES-256-GCM. Encryption keys are stored in the Android Keystore (hardware-backed on supported devices). There is no account system, no server, and no cloud component.
Data Sharing
Noted does not share data with any third party. When you use the export or share features, you are explicitly choosing to send your own data to a destination of your choice. Noted never initiates any data transfer on its own.
Backups
Noted opts out of Android's Auto Backup and device-transfer systems for all sensitive files: the encrypted database, encryption-key material, the PIN hash, stored images and drawings, and voice recordings. Non-sensitive preferences (such as theme and view mode) may be included in Android system backups.
Permissions
Noted keeps permissions to a minimum. The only ones that can touch your content are ones you actively opt into:
Microphone (RECORD_AUDIO) — to record voice memos. Android prompts you for this at runtime the first time you tap the record button, never on app start, and you can decline. If you deny it, every other feature still works; only voice recording is unavailable. Recorded audio is encrypted on the device and never leaves it.
Biometric (USE_BIOMETRIC / USE_FINGERPRINT) — to offer fingerprint or face unlock alongside your PIN or password. These are normal Android permissions granted at install, so there is no separate prompt; biometric unlock only takes effect if you turn it on yourself.
Noted also carries four normal (non-sensitive) permissions that are added automatically by standard Android libraries it depends on — chiefly the background-scheduling library (WorkManager) behind the optional home-screen Quick Note widget. These are granted at install, are never prompted for, and there is nothing for you to opt into. None of them can read your notes or send data anywhere:
WAKE_LOCK,RECEIVE_BOOT_COMPLETED, andFOREGROUND_SERVICE— let that library schedule and run its background work.ACCESS_NETWORK_STATE— lets it check whether a network connection exists. This does not grant the ability to use the network: Noted still has noINTERNETpermission and remains incapable of transmitting data off your device.
To attach a photo, Noted launches your device's existing camera app and receives the resulting picture. Noted does not request the Camera permission and never accesses the camera directly. The only remaining entry is a private signature permission Android uses internally to keep Noted's own components from being triggered by other apps; it grants no access to your data or to any device feature. No other permissions are requested or used.
Changes
If this policy changes, the updated version will be posted at this URL with a new date.