Noted — Last updated: May 2026
Noted does not collect, transmit, or share any user data. Everything you create in the app stays on your device.
Noted collects no data whatsoever. No personal information, no analytics, no telemetry, no crash reports, no advertising identifiers, no location data. The app does not have the INTERNET permission and is technically incapable of transmitting data off your device.
All data you create — notes, collections, images, drawings, and voice recordings — is stored locally on your device and encrypted at rest. Notes, collections, and drawing data are held in a database encrypted with AES-256 via SQLCipher; images, rendered drawings, and voice recordings are stored as separate files, each encrypted with AES-256-GCM. Encryption keys are stored in the Android Keystore (hardware-backed on supported devices). There is no account system, no server, and no cloud component.
Noted does not share data with any third party. When you use the export or share features, you are explicitly choosing to send your own data to a destination of your choice. Noted never initiates any data transfer on its own.
Noted opts out of Android's Auto Backup and device-transfer systems for all sensitive files: the encrypted database, encryption-key material, the PIN hash, stored images and drawings, and voice recordings. Non-sensitive preferences (such as theme and view mode) may be included in Android system backups.
Microphone (RECORD_AUDIO) — to record voice memos. Requested only when you first tap the record button, never on app start. If you deny it, every other feature still works; only voice recording is unavailable. Recorded audio is encrypted on the device and never leaves it.
Biometric (USE_BIOMETRIC / USE_FINGERPRINT) — to offer fingerprint/face unlock alongside the PIN. These are normal Android permissions that are not prompted for; biometric unlock is used only if you enable it.
To attach a photo, Noted launches your device's existing camera app and receives the resulting picture. Noted does not request the Camera permission and never accesses the camera directly. No other permissions are requested or used.
If this policy changes, the updated version will be posted at this URL with a new date.