NoteVault Privacy Policy and Terms

1. Information stored on your device

NoteVault stores the information needed to provide its private note-taking features locally on your device. This may include:

Note titles, note content, colors, pinned state, and other note organization details
Sorting, preview visibility, auto-lock, theme, and other app preferences
A salted hash of your PIN, PIN configuration, failed-unlock state, and related security metadata
Whether biometric unlock is enabled for the vault
Local migration status and preferences used to recover compatible notes from an earlier NoteVault installation

NoteVault does not require a developer-managed account and does not intentionally upload note titles, note content, or your plain-text PIN to developer-managed servers.

2. Biometric authentication

NoteVault may use Android biometric authentication to unlock the local vault. Fingerprint, facial, or other biometric templates are processed by Android and are not provided to or stored by NoteVault. The app receives only an authentication success, failure, or cancellation result.

NoteVault stores only the local preference indicating whether biometric unlock is enabled. Biometric availability and recognition are controlled by Android and the security methods enrolled on your device. You remain responsible for protecting the device, PIN, and enrolled biometric methods.

3. Legacy-note migration

When upgrading from an earlier NoteVault version, existing notes, settings, PIN metadata, and compatible preferences may be migrated locally on the same device. This migration does not upload note content to the developer.

Migration depends on the earlier app data still being present and readable on the device. Uninstalling the app, clearing app storage, device failure, incompatible older data, or storage corruption may prevent recovery. NoteVault does not provide an account-based cloud recovery service for local vault data.

4. Firebase Analytics

The current Android release uses Firebase Analytics to process limited technical and usage information for product improvement. Analytics data may include app interactions, app version, device model, operating system version, and general diagnostic or performance information.

Note titles, note content, biometric templates, and the plain-text vault PIN are not intended to be sent as analytics data. Firebase Analytics is operated by Google and processes information under Google’s own privacy and retention practices.

5. Permissions and system features

NoteVault uses or relies on the following device capabilities for its stated functions:

Local app storage for notes, preferences, migration data, and security metadata
Android biometric authentication when you enable biometric unlock
App lifecycle information so the vault can lock when the app leaves the foreground
Internet access for Firebase Analytics

The app does not require contacts, precise location, camera, or microphone access for its core note-taking and vault features.

6. Retention and deletion

You control local NoteVault data through the app and Android settings. You may:

Delete individual notes
Clear local vault data through available app settings
Disable biometric unlock
Clear the app’s storage or uninstall the app to remove local app data

Deleted local data may not be recoverable. Analytics information already processed by Google remains subject to Google’s retention controls even after the app is uninstalled.

7. Security limitations

NoteVault uses a hashed PIN and Android authentication features to reduce unauthorized access, but no device or software security method can guarantee absolute protection. The app does not claim complete encrypted-at-rest protection beyond the security controls explicitly provided by the app and Android.

8. Terms of use

NoteVault is provided for lawful personal or internal note-taking. You are responsible for maintaining a secure PIN, protecting your device, keeping any device-level backup you consider necessary, and verifying migrated notes before deleting older data or backups.

To the maximum extent permitted by law, the developer is not liable for note loss, failed migration, forgotten credentials, biometric recognition failure, unauthorized device access, storage corruption, uninstallation, user-initiated deletion, or device failure. Nothing in these terms excludes rights or liabilities that cannot legally be excluded.

9. Contact and changes

This policy may be updated when NoteVault’s features, permissions, SDKs, or data practices change. Questions may be sent to help.tenshioapps@gmail.com.