Privacy Policy

Last updated: June 18, 2026

SyncNote is a local-first, privacy-focused note-taking app. Your data belongs to you. This policy explains what data we collect, how it is used, and your rights.

1. Data Storage

All your notes are stored locally on your device using an embedded SQLite database. Notes are never sent to any server unless you explicitly enable Cloud Backup or Device Sync.

2. Cloud Backup (Optional)

If you sign in with Google and enable Cloud Backup, your notes are end-to-end encrypted before being uploaded to Google Firebase Firestore. This means:

• Your note content is encrypted on your device using AES-256-GCM before it leaves your phone
• The encryption key is stored in your Google Drive's hidden app-data folder — only accessible by this app on your account
• No one (including us) can read your backed-up notes without access to your Google account
• Backup data is stored in your personal Firebase namespace
• Protected by Firebase security rules — only you can access it
• Deletable at any time via Settings

3. Device Sync (Optional)

When you pair two devices using a pairing code, a shared workspace is created in Firestore. Only notes you explicitly share to a workspace are synced between paired devices. Private notes are never uploaded.

4. Authentication

Sign-in is optional and only required for Cloud Backup. We support Google Sign-In, handled through Firebase Authentication. We store your email address and display name for account identification. We do not store passwords.

5. Device Information

When you set up the app, a random UUID is generated as your device ID. You also provide a device name. This information is stored locally and used only for device pairing and sync identification. We do not collect hardware identifiers, IMEI, or advertising IDs.

6. Private Vault

The Private Vault allows you to protect sensitive notes with a passcode and optional biometric authentication. Vault notes are encrypted locally and never uploaded to the cloud or synced to other devices. If you forget your passcode, vault notes cannot be recovered.

7. Data We Do NOT Collect

• No analytics or tracking
• No crash reporting
• No advertising or ad identifiers
• No location data
• No contacts or phone data
• No usage statistics
• No third-party SDKs for data collection

8. Data Retention

Local data stays on your device until you delete the app. Cloud backup remains until you delete it via Settings. Archived notes are automatically permanently deleted after 30 days. Pairing codes expire after 5 minutes.

9. Data Sharing

We do not sell, share, or transfer your data to any third party. Your data is only transmitted to Firebase services (Google Cloud) when you enable Cloud Backup or Device Sync.

10. Security

• Cloud backups are end-to-end encrypted with AES-256-GCM
• Encryption keys are stored in your Google Drive app-data folder
• Vault notes are encrypted locally with a passcode-derived key
• All data in transit is encrypted via TLS (HTTPS)
• Firebase Firestore encrypts data at rest
• Firestore security rules restrict access to your own data

11. Your Rights

You can at any time: delete all cloud backup data from Settings, sign out to stop all cloud operations, delete the app to remove all local data, delete your workspace to stop syncing, or unshare individual notes.

12. Contact

If you have any questions about this privacy policy, please contact us through the app's support channel.

Back to SyncNote