Privacy Policy

Effective date: July 26, 2026 · Applies to the Noted Android app (com.nextgenverse.notes) by NextGenVerse

The short version

Your notes live on your device. Noted is an offline-first app — everything you write is stored locally on your phone.
We run no servers of our own. Optional cloud features (sign-in, sync, backup) use Google services under your own Google account.
No ads, no analytics trackers, no selling of data. The only telemetry is anonymous crash reporting.
You can use the core app fully without ever signing in or connecting to the internet.

This Privacy Policy explains what information the Noted app ("Noted", "the app", "we", "us") handles, where it goes, and the choices you have. Noted is developed and published by NextGenVerse. By using the app you agree to the practices described here.

1. Data stored on your device

Noted is designed to work entirely offline. The following data is created by you and stored only in the app's private storage on your device:

Notes — titles, note content (including rich text, checklists, and tables), folders, tags, and pin/lock status.
Attachments — photos, videos, voice recordings, drawings, and scanned documents you add to notes.
App preferences — theme, accent color, sort order, language, notification and backup settings.

This data stays on your device unless you choose to use one of the optional cloud features described below, or share/export a note yourself. Other apps on your device cannot read Noted's private storage.

You can optionally sign in with your Google account. When you do, we receive from Google, via Firebase Authentication:

your email address,
your display name and profile photo URL,
a unique account identifier (UID).

This information is used to identify your account within the app and to enable cloud sync and backup. Signing in is never required to create, edit, or keep notes.

3. Cloud sync (when signed in)

When you are signed in, your notes may be stored in Google Cloud Firestore (a Google-operated database) under your account, so they can be synced across your devices. Synced data includes your note content and folder structure, associated with your account identifier. This data is transmitted over encrypted connections (TLS) and is accessible only through your account. If you never sign in, no note content is sent to Firestore.

4. Google Drive backup (optional)

You can back up your notes to your own Google Drive. If you grant permission:

The app creates a backup archive (a ZIP file containing your notes and attachments) in the hidden app-data area of your Google Drive (appDataFolder). The app can only access this dedicated area — it cannot see or read any other files in your Drive.
You can back up manually, or enable automatic daily backup, which runs about once per day when your device has a network connection.
The backup belongs to your Google account. NextGenVerse has no access to it.
The backup archive is protected by your Google account and Google's security measures, but it is not additionally encrypted by the app before upload.

You can revoke Noted's Drive access at any time in your Google Account under Security → Third-party apps & services. Revoking access or removing the app's data there deletes the backup.

5. Android system backup

Like most Android apps, Noted participates in Android's device backup system. If you have Google device backup enabled on your phone, some app data — including note attachments such as photos and recordings — may be included in your device backup to your Google account and in device-to-device transfers. This is controlled by your device's backup settings (Settings → Google → Backup), not by Noted.

6. Crash reporting

The app uses Firebase Crashlytics to help us find and fix bugs. If the app crashes, Crashlytics automatically collects:

crash stack traces and app state at the time of the crash,
device model, operating-system version, and app version,
a randomly generated installation identifier (not linked to your name or email).

Crash reports never include your note content. This data is used solely to improve the app's stability. See Firebase's privacy documentation for details on how Google processes this data.

7. Device permissions

Noted requests the following permissions. Each is used only when you use the corresponding feature, and the app works without any of them for basic note-taking:

Permission	Why Noted asks for it
Camera	To take photos and videos, and to scan documents into your notes.
Microphone	To record voice notes.
Photos & media	To let you pick existing images from your gallery to attach to notes.
Biometrics / screen lock	To unlock notes you have locked, using your fingerprint, face, or device PIN.
Notifications	To show daily writing reminders (around 9:00 AM and 7:00 PM). You can turn these off in your device's notification settings.
Internet & network state	For optional sign-in, sync, backup, and crash reporting only.

8. On-device processing

Document scanning uses Google's ML Kit document scanner, which processes images on your device. The app does not send your scanned images, photos, or recordings to any server for processing.

We do not sell, rent, or trade your data. Ever. There is no advertising in the app and no third-party analytics or tracking SDKs.

The only third party that processes data on our behalf is Google LLC, through the services described above: Firebase Authentication, Cloud Firestore, Firebase Crashlytics, Google Drive, and Google Play services. Google's handling of this data is governed by the Google Privacy Policy.

When you use the app's own share or PDF-export feature, you choose the destination — that sharing is under your control.

10. Data retention & deletion

Notes on your device — deleted notes move to Trash, where you can restore or permanently delete them. Permanently deleted notes are removed from the device.
Uninstalling the app removes all locally stored notes, attachments, and preferences from your device.
Drive backups — remain in your Google Drive app-data area until you revoke the app's access or delete its data in your Google Account (Security → Third-party apps & services).
Synced data — data stored in Firestore under your account persists until deleted. To request deletion of your account data, contact us at the address below.
Crash reports — retained by Firebase Crashlytics for a limited period (typically 90 days) per Google's policies.

11. Security

Your local data is protected by Android's app sandbox, which prevents other apps from reading it, and by your device's built-in storage encryption where enabled. Data sent to Google services is transmitted over encrypted connections (TLS).

You can lock individual notes; unlocking requires an enrolled fingerprint, face unlock, or device screen lock. Note that the lock relies on your device having a screen lock or biometric enrolled — if none is set up on the device, locked notes remain accessible. No method of storage or transmission is 100% secure, so we cannot guarantee absolute security.

12. Children's privacy

Noted is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information through the app, contact us and we will take appropriate steps to delete it.

13. Changes to this policy

We may update this Privacy Policy as the app evolves. Material changes will be reflected on this page with an updated effective date. Continued use of the app after changes take effect constitutes acceptance of the revised policy.

14. Contact us

If you have questions about this policy or your data, contact us at:

NextGenVerse
Email: nextgenversesolutions@gmail.com