Privacy Policy for NoteCraft

Effective date: 2026-06-18

NoteCraft is an offline-first, privacy-focused Markdown notes app. It lets you write and format notes with a Markdown editor (headings, lists, checklists, quotes, tables, code blocks, links, and images), organize them with tags, colors, pinning, and favorites, switch between grid and list views, search your whole library or find a word inside a single note, archive finished notes, and recover deleted ones from a trash. Your work is saved as you type, an automatic version history keeps earlier drafts, and you can optionally use a built-in AI writing assistant, back up and sync your notes through your own cloud account, lock the app behind device authentication, export or share notes as text, Markdown, or PDF, and upgrade to an optional subscription or one-time purchase that unlocks the premium features and removes advertisements. This Privacy Policy applies to the NoteCraft mobile application on every platform where it is distributed and explains what information the app may process when you use it, how that information is used, and the choices you have.

NoteCraft does not require an account to write notes and does not ask for your name, phone number, or precise location. Your notes, attachments, version history, settings, and purchase status are kept in private app storage and a local database on your device. We do not operate a backend server and never receive a copy of your notes. Some optional features that you turn on do send the specific content you choose to third parties that you select — the AI provider you configure for the writing assistant, or your own cloud account for cloud backup — as described below.

1. Information We Collect

1.1 Notes and content stored on your device

When you create or edit a note, NoteCraft writes the note's Markdown content, its title and a short preview, a search index derived from the text, any tags, the chosen note color, pin and favorite flags, its status (active, archived, or in the trash), timestamps, and automatic version-history snapshots of earlier drafts into the app's local database and private file storage on your device. Images you add to a note are stored as files in the same private storage. This local content is used so the app can render your library, search, show previous versions, and keep working fully offline. You can move notes to the trash and delete them permanently, clear individual versions, or uninstall the app, after which the local database and the app's private files are removed.

1.2 Camera

If you choose to add a photo to a note by taking one, NoteCraft uses the camera to capture the image, which is then saved only into the app's private storage as described in section 1.1. Camera frames are processed on your device and are never streamed or uploaded to a server we operate. The camera is optional — you can also add images from your existing library, and the app works without a camera.

1.3 Photo library

You can add an existing image from your photo library to a note. iOS asks for photo-library access the first time you use this feature. Imported images are copied into the app's private storage and are processed only on your device; they are never uploaded by NoteCraft.

You can add an existing image to a note. Choosing an image uses the system Photo Picker, so NoteCraft does not request broad access to your media library. Imported images are copied into the app's private storage and are processed only on your device; they are never uploaded by NoteCraft.

You can add an existing image to a note. On iOS this uses photo-library access; on Android it uses the system Photo Picker, so the app does not request broad access to your media library. Imported images are copied into the app's private storage and are processed only on your device; they are never uploaded by NoteCraft.

1.4 AI writing assistant

The AI writing assistant is optional and is off until you enable it by adding your own API key for a provider you choose — Qwen (Alibaba Cloud DashScope), OpenAI, or Google Gemini. When you run an AI action on a note (for example polish, rewrite, expand, shorten, summarize, fix grammar, change tone, continue writing, generate a title, extract key points, extract to-dos, or translate), the text you act on is sent over an encrypted connection directly from your device to the official API endpoint of the provider you selected, authenticated with your own API key, and the generated result is returned to your device.

NoteCraft does not operate an AI backend and does not receive, store, log, or proxy your prompts or the AI output on any server of ours. The processing is performed by the provider you chose, under that provider's own terms and privacy policy. Your API keys are stored only in your device's system secure storage (the iOS Keychain or the Android Keystore) and are transmitted only to that provider's matching endpoint. If you do not enable the assistant, no note content is sent to any AI provider.

1.5 Cloud backup and sync

Cloud backup and sync is optional and off by default. If you turn it on, you choose a destination and sign in to it, and NoteCraft stores your notes, tags, and attachments there as compressed files so they can roam between your devices:

Cloud backup and sync is optional and off by default. If you turn it on, you connect your Google account, and NoteCraft stores your notes, tags, and attachments in Google Drive as compressed files so they can roam between your devices:

Google Drive: NoteCraft requests only the app-data scope, which limits access to a private, hidden application folder inside your own Google Drive. The app cannot see or access any of your other Google Drive files. To connect, you sign in with Google; the connected account's email address may be read so the app can show you which account is linked and write an ownership marker (kept in that hidden folder and in local settings) so it can detect if you later sign in with a different account and avoid mixing data between accounts.
iCloud: NoteCraft stores the same content in the app's private iCloud container tied to your Apple ID. iCloud does not expose an email address to the app.
iCloud (iOS only): on iPhone and iPad, NoteCraft can instead store the same content in the app's private iCloud container tied to your Apple ID. iCloud does not expose an email address to the app.

We do not operate any sync server and never receive a copy of your notes. Synced content is transmitted over the operating system's encrypted transport to your own cloud account and is then subject to that cloud provider's terms and privacy policy. You can disconnect cloud sync at any time in the app's settings.

1.6 App lock

You can optionally lock NoteCraft so it asks for Face ID, Touch ID, or your device passcode before your notes can be opened. Authentication is performed entirely by the operating system; NoteCraft only receives a success or failure result and never sees your biometric data or passcode.

You can optionally lock NoteCraft so it asks for your biometric (such as fingerprint or face) or device credential before your notes can be opened. Authentication is performed entirely by the operating system; NoteCraft only receives a success or failure result and never sees your biometric data or device credential.

You can optionally lock NoteCraft so it asks for your device biometrics or passcode (Face ID, Touch ID, fingerprint, or device credential) before your notes can be opened. Authentication is performed entirely by the operating system; NoteCraft only receives a success or failure result and never sees your biometric data or passcode.

1.7 Sharing and exporting notes

When you share or export a note as plain text, a Markdown file, or a PDF, NoteCraft passes the content to your system share sheet using the standard share API. The target app you pick then receives that content. NoteCraft hands the content to the system and does not upload your notes to any server we operate.

Building a PDF may require fonts that are not bundled with the app. Basic Latin, Cyrillic, Greek, and Vietnamese text uses fonts included in the app and needs no network. If a note you export or share as a PDF contains other scripts — such as Chinese, Japanese, Korean, emoji, Arabic, Thai, Devanagari, or Hebrew — NoteCraft requests a matching font subset from Google Fonts (the official endpoints, with Google's mainland-China mirrors as a fallback). For this request, only the distinct characters of those scripts that actually appear in the note are sent, so the service can return a precise subset; your note's full text, title, structure, and all other content are not sent. Downloaded subsets are cached on your device, so exporting the same characters again needs no network. This happens only when you export or share a PDF.

1.8 In-app review

When you choose to rate the app, NoteCraft asks the system to show the standard StoreKit in-app review dialog. If that surface is unavailable, the app falls back to opening the App Store listing. The dialog and any rating you leave are handled entirely by Apple; NoteCraft does not see your rating or any content you write.

When you choose to rate the app, NoteCraft asks the system to show the standard Google Play in-app review dialog. If that surface is unavailable, the app falls back to opening the Play Store listing. The dialog and any rating you leave are handled entirely by Google; NoteCraft does not see your rating or any content you write.

When you choose to rate the app, NoteCraft asks the system to show the standard in-app review dialog (StoreKit on iOS, Google Play In-App Review on Android). If that surface is unavailable, the app falls back to opening the store listing. The dialog and any rating you leave are handled entirely by the platform; NoteCraft does not see your rating or any content you write.

1.9 Advertising data

While you have not upgraded to premium, NoteCraft displays advertisements through Google AdMob (app-open, interstitial, and rewarded ad formats) to keep the app free to use. Google AdMob and its partners may collect and process information such as your Identifier for Advertisers, device information (model, operating system, language), coarse location derived from IP address, and interaction data (ad views, clicks). NoteCraft shows the App Tracking Transparency prompt before any cross-app tracking identifier is requested, and presents the Google User Messaging Platform consent form before any ad is requested where regional regulations require it. This processing is performed by Google according to Google's own advertising and privacy policies, and you can limit or reset your advertising identifier at any time from your device's system settings (see section 4). Premium members do not see advertisements.

While you have not upgraded to premium, NoteCraft displays advertisements through Google AdMob (app-open, interstitial, and rewarded ad formats) to keep the app free to use. Google AdMob and its partners may collect and process information such as your Advertising ID, device information (model, operating system, language), coarse location derived from IP address, and interaction data (ad views, clicks). NoteCraft presents the Google User Messaging Platform consent form before any ad is requested where regional regulations require it. This processing is performed by Google according to Google's own advertising and privacy policies, and you can limit or reset your Advertising ID at any time from your device's system settings (see section 4). Premium members do not see advertisements.

While you have not upgraded to premium, NoteCraft displays advertisements through Google AdMob (app-open, interstitial, and rewarded ad formats) to keep the app free to use. Google AdMob and its partners may collect and process information such as your advertising identifier (Apple's Identifier for Advertisers on iOS, or the Advertising ID on Android), device information (model, operating system, language), coarse location derived from IP address, and interaction data (ad views, clicks). On iOS, NoteCraft shows the App Tracking Transparency prompt before any cross-app tracking identifier is requested. NoteCraft also presents the Google User Messaging Platform consent form before any ad is requested where regional regulations require it. This processing is performed by Google according to Google's own advertising and privacy policies, and you can limit or reset your advertising identifier at any time from your device's system settings (see section 4). Premium members do not see advertisements.

1.10 In-app purchases

NoteCraft offers optional premium access as auto-renewing subscriptions (monthly and annual) and a one-time lifetime purchase. Transactions are processed by the Apple App Store. NoteCraft does not receive your payment method, billing address, or any personally identifying information from Apple. It only receives the purchase identifier and the product identifier, which are stored locally so the app can unlock premium and hide advertisements without contacting any backend. You can restore your purchase on any device signed in to the same Apple ID by tapping "Restore Purchases".

NoteCraft offers optional premium access as auto-renewing subscriptions (monthly and annual) and a one-time lifetime purchase. Transactions are processed by Google Play. NoteCraft does not receive your payment method, billing address, or any personally identifying information from Google. It only receives the purchase identifier and the product identifier, which are stored locally so the app can unlock premium and hide advertisements without contacting any backend. You can restore your purchase on any device signed in to the same Google account by tapping "Restore Purchases".

NoteCraft offers optional premium access as auto-renewing subscriptions (monthly and annual) and a one-time lifetime purchase. Transactions are processed by the platform store (Apple App Store on iOS, Google Play on Android). NoteCraft does not receive your payment method, billing address, or any personally identifying information from the store. It only receives the purchase identifier and the product identifier, which are stored locally so the app can unlock premium and hide advertisements without contacting any backend. You can restore your purchase on any device signed in to the same store account by tapping "Restore Purchases".

2. How We Use Information

To create, edit, format, organize, search, version, archive, and restore the notes you write, and to render your library, all from content stored on your device.
To add photos to your notes from the camera or your photo library, kept in the app's private storage.
To run the optional AI writing assistant by sending the text you choose to the AI provider you configured, and returning the result to your device.
To back up and sync your notes to your own cloud account when you enable cloud sync, and to detect account changes so data is not mixed between different accounts.
To lock the app with device authentication when you enable app lock.
To hand a note's text, Markdown, or PDF to your system share sheet when you choose to share or export.
To build a PDF export, including requesting a font subset from Google Fonts for scripts that are not bundled with the app, using only the distinct characters that appear in the note (see section 1.7).
To verify your premium entitlement and, once it is active, unlock premium features and hide advertisements.
To serve and measure advertisements through Google AdMob in the free tier, including showing the App Tracking Transparency prompt and the Google User Messaging Platform consent form where regional regulations require it.
To serve and measure advertisements through Google AdMob in the free tier, including showing the Google User Messaging Platform consent form where regional regulations require it.
To serve and measure advertisements through Google AdMob in the free tier, including showing the App Tracking Transparency prompt on iOS and the Google User Messaging Platform consent form where regional regulations require it.
To trigger the system in-app review dialog when you choose to rate the app.
To open the privacy policy, terms, and the "More Apps" page inside an in-app browser view, and to open external links you tap. The "More Apps" page is loaded with non-personal parameters — your device language, platform, and light/dark theme — so it can show a relevant, localized list.
To maintain app stability and comply with applicable app store and legal requirements.

3. We Do Not Collect

NoteCraft does not request, collect, or transmit to us:

Your name, email address, phone number, or postal address. (If you connect Google Drive sync, the app reads your Google account email only on your device to show the connected account and to mark data ownership in your own cloud; it is not sent to us.)
Your precise location (the app itself requests no fine or coarse location permission; AdMob may derive coarse location from your IP for ad delivery).
Health-platform data (the app does not integrate with Apple Health, Google Fit, or Health Connect).
Your contacts, calendar, microphone audio, SMS, or call history.
Crash reports or analytics events sent to a backend we operate. NoteCraft does not integrate any third-party analytics, crash-reporting, or remote-logging SDK.

Your notes never reach a server we operate. Note content leaves your device only through features you use: the AI assistant (sent to the AI provider you configured, section 1.4), cloud sync (stored in your own cloud account, section 1.5), and — when you export or share a PDF that contains certain scripts — the distinct characters of those scripts sent to Google Fonts to build the document (section 1.7).

4. Advertising and Google AdMob

NoteCraft uses Google AdMob to show advertisements in the free tier. Depending on your region and device settings, AdMob may use your Identifier for Advertisers to deliver personalized or non-personalized advertising, to measure ad performance, and to prevent fraud. NoteCraft shows the App Tracking Transparency prompt before AdMob is allowed to access the Identifier for Advertisers, and presents the Google User Messaging Platform consent form before any ad is requested where regional regulations require it. You can limit ad personalization or reset your advertising identifier at any time from your device's system settings.

NoteCraft uses Google AdMob to show advertisements in the free tier. Depending on your region and device settings, AdMob may use your Advertising ID to deliver personalized or non-personalized advertising, to measure ad performance, and to prevent fraud. NoteCraft presents the Google User Messaging Platform consent form before any ad is requested where regional regulations require it. Ad behavior is also governed by your device's ad personalization setting and Google AdMob's own regional policies. You can limit ad personalization or reset your Advertising ID at any time from your device's system settings.

NoteCraft uses Google AdMob to show advertisements in the free tier. Depending on your region and device settings, AdMob may use your advertising identifier to deliver personalized or non-personalized advertising, to measure ad performance, and to prevent fraud. On iOS, NoteCraft shows the App Tracking Transparency prompt before AdMob is allowed to access the Identifier for Advertisers. NoteCraft also presents the Google User Messaging Platform consent form before any ad is requested where regional regulations require it. You can limit ad personalization or reset your advertising identifier at any time from your device's system settings.

You can limit ad tracking at any time from your device settings:

On iOS and iPadOS, manage your choice under Settings > Privacy & Security > Tracking, and under Settings > Privacy & Security > Apple Advertising.
On Android, reset or delete your Advertising ID and opt out of ad personalization under Settings > Privacy > Ads (the exact path may vary by device).
On iOS and iPadOS, manage your choice under Settings > Privacy & Security > Tracking, and under Settings > Privacy & Security > Apple Advertising.
On Android, reset or delete your Advertising ID and opt out of ad personalization under Settings > Privacy > Ads (the exact path may vary by device).

For further details, please see:

5. AI Providers

The AI writing assistant is optional and works only after you add your own API key for a provider you choose. When you run an AI action, the text you act on is sent over an encrypted connection directly from your device to that provider's official endpoint, and is processed by the provider under its own terms and privacy policy. NoteCraft has no AI server and does not receive or retain your prompts or results. The available providers and their endpoints are:

Qwen — Alibaba Cloud DashScope (a China-mainland endpoint for mainland-issued keys, otherwise the international endpoint, matching your key's region).
OpenAI — the OpenAI API.
Google Gemini — the Google Gemini API.

You are responsible for obtaining and safeguarding your API key and for any usage or charges associated with it. You can review the relevant provider's policies before enabling the assistant (see section 16).

6. Sharing of Information

We do not sell your personal information. Depending on the features you use, information may be processed by:

The AI provider you select for the writing assistant (Qwen / Alibaba Cloud DashScope, OpenAI, or Google Gemini), to generate the result for the text you send.
Your own cloud account when you enable sync — Google Drive (via Google Sign-In, app-data folder only) or iCloud — which stores your notes in storage that belongs to you.
Your own Google Drive account when you enable sync (via Google Sign-In, app-data folder only), which stores your notes in storage that belongs to you.
Your own cloud account when you enable sync — Google Drive (via Google Sign-In, app-data folder only), or iCloud on iOS — which stores your notes in storage that belongs to you.
Google AdMob and its advertising partners, to deliver and measure advertisements in the free tier.
The Google User Messaging Platform, to request and record your advertising consent where regional regulations require it.
Google Fonts, which receives only the distinct characters of certain scripts that appear in a note, and only when you export or share that note as a PDF, in order to return the matching font subset (see section 1.7).
The Apple App Store, for app distribution, updates, billing for in-app purchases, restore-purchases verification, and platform-level diagnostics.
Google Play, for app distribution, updates, billing for in-app purchases, restore-purchases verification, and platform-level diagnostics.
The platform store from which you downloaded the app (Apple App Store on iOS, Google Play on Android), for app distribution, updates, billing for in-app purchases, restore-purchases verification, and platform-level diagnostics.
Any app you explicitly choose when sharing or exporting a note through the system share sheet (the target app then receives the content described in section 1.7).

7. Data Retention

Local content such as your notes, attachments, version history, settings, and premium status remains on your device until you delete it from inside the app or uninstall the app. If you enabled cloud sync, a copy is stored in your own Google Drive or iCloud account until you delete it there or disconnect and remove it. Data processed by third-party services such as your chosen AI provider, Google AdMob, the Google User Messaging Platform, or the Apple App Store is retained according to those services' own retention policies.

Local content such as your notes, attachments, version history, settings, and premium status remains on your device until you delete it from inside the app, clear the app's data from Settings > Apps > NoteCraft > Storage, or uninstall the app. If you enabled cloud sync, a copy is stored in your own Google Drive account until you delete it there or disconnect and remove it. Data processed by third-party services such as your chosen AI provider, Google AdMob, the Google User Messaging Platform, or Google Play is retained according to those services' own retention policies.

Local content such as your notes, attachments, version history, settings, and premium status remains on your device until you delete it from inside the app, uninstall the app, or (on Android) clear the app's data from Settings > Apps > NoteCraft > Storage. If you enabled cloud sync, a copy is stored in your own Google Drive or iCloud account until you delete it there or disconnect and remove it. Data processed by third-party services such as your chosen AI provider, Google AdMob, the Google User Messaging Platform, the Apple App Store, or Google Play is retained according to those services' own retention policies.

8. Your Choices and Controls

You can move notes to the trash, delete them permanently, and clear version history at any time.
You can enable or disable the AI writing assistant and remove your API key from the app's settings; with no key configured, no note content is sent to any AI provider.
You can turn cloud sync on or off and disconnect your cloud account; you can also delete the synced copy from your Google Drive or iCloud at any time.
You can turn cloud sync on or off and disconnect your cloud account; you can also delete the synced copy from your Google Drive at any time.
You can turn cloud sync on or off and disconnect your cloud account; you can also delete the synced copy from your Google Drive, or iCloud on iOS, at any time.
You can enable or disable app lock from the app's settings.
You can manage camera and photo access for the app, and manage your advertising identifier and ad personalization, from your device's system settings.
You can restore your purchase by tapping "Restore Purchases"; if it is found in your Apple ID, premium is re-applied locally and advertisements are hidden.
You can restore your purchase by tapping "Restore Purchases"; if it is found in your Google account, premium is re-applied locally and advertisements are hidden.
You can restore your purchase by tapping "Restore Purchases"; if it is found in your platform store account, premium is re-applied locally and advertisements are hidden.
You can uninstall NoteCraft at any time, which removes all local data created by the app on your device.

9. Security

We take reasonable technical and organizational steps to reduce privacy and security risks. Your notes, attachments, and premium status live in NoteCraft's private app sandbox on your device, and your AI API keys are kept in the iOS Keychain. Network calls made by the app (the AI provider you configured, cloud sync to your own account, advertising, advertising consent, the App Store, in-app review, PDF export font downloads, and the in-app browser views) use the operating system's encrypted transports. However, no method of electronic storage or internet transmission is completely secure.

We take reasonable technical and organizational steps to reduce privacy and security risks. Your notes, attachments, and premium status live in NoteCraft's private app sandbox on your device, and your AI API keys are kept in the Android Keystore-backed secure storage. Network calls made by the app (the AI provider you configured, cloud sync to your own account, advertising, advertising consent, Google Play, in-app review, PDF export font downloads, and the in-app browser views) use the operating system's encrypted transports. However, no method of electronic storage or internet transmission is completely secure.

We take reasonable technical and organizational steps to reduce privacy and security risks. Your notes, attachments, and premium status live in NoteCraft's private app sandbox on your device, and your AI API keys are kept in the platform's system secure storage (iOS Keychain or Android Keystore). Network calls made by the app (the AI provider you configured, cloud sync to your own account, advertising, advertising consent, the platform store, in-app review, PDF export font downloads, and the in-app browser views) use the operating system's encrypted transports. However, no method of electronic storage or internet transmission is completely secure.

10. Children's Privacy

NoteCraft is a general-audience productivity app and is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided personal information through the app, please contact us and we will take appropriate steps.

11. International Users

NoteCraft is available globally. Depending on the features you use (for example the AI assistant, cloud sync, PDF export fonts, AdMob, or the Google User Messaging Platform), your data may be processed by service providers in locations outside your country or region, subject to those providers' applicable policies and safeguards.

12. Permissions

NoteCraft only uses the permissions and identifiers needed for its declared features:

Camera: to take a photo to add to a note. Camera frames are processed on-device and saved only to the app's private storage.
Photo Library: to add an existing image to a note.
Photo selection: adding an existing image uses the system Photo Picker, so the app does not request broad media-library access.
Photo library / selection: on iOS, photo-library access to add an image; on Android, the system Photo Picker (no broad media permission).
Face ID / biometrics: to unlock the app when you enable app lock.
Biometrics (USE_BIOMETRIC): to unlock the app when you enable app lock.
Biometrics / Face ID: to unlock the app when you enable app lock.
Network & Identifier for Advertisers: to run the AI assistant, cloud sync, advertisements, the advertising consent form, the App Store purchase flow, the in-app review flow, and the in-app browser views.
Network (INTERNET) & Advertising ID (AD_ID): to run the AI assistant, cloud sync, advertisements, the advertising consent form, the Google Play billing flow, the in-app review flow, and the in-app browser views.
Network & advertising identifier: to run the AI assistant, cloud sync, advertisements, the advertising consent form, the platform store purchase flow, the in-app review flow, and the in-app browser views.
App Tracking Transparency: shown before AdMob may access the Identifier for Advertisers.
App Tracking Transparency (iOS only): shown before AdMob may access the Identifier for Advertisers.

NoteCraft does not request access to your precise location, microphone, contacts, calendar, health platforms (Apple Health / Google Fit / Health Connect), SMS, or call history.

13. Your Rights

Depending on where you live, you may have rights under applicable privacy laws (including GDPR, UK GDPR, CCPA/CPRA, LGPD and similar regulations) to access, correct, delete, restrict, object to processing, or port data relating to you. Because NoteCraft stores your notes and settings locally on your device (and, if you enable it, in your own cloud account), you can exercise most of these rights directly by deleting notes inside the app, disconnecting and clearing cloud sync, or uninstalling the app to wipe its private storage. For requests that cannot be resolved this way, please contact us using the details below. If you are located in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data-protection supervisory authority.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to the app, legal requirements, or third-party service providers. The latest version will be published with an updated effective date at the top of this page. Your continued use of the app after an update means you accept the revised policy.

15. Contact Us

If you have questions about this Privacy Policy or about how your data is handled, please contact us at: luofeiyuo@gmail.com