"MobiNotes" Privacy Policy

"MobiNotes" ("Us" or "We" or "Our"), developed by Dwerty, is committed to respecting the privacy rights of the users of its mobile application. The Application functions primarily as a local, offline note-taking and data protection utility.

1. Data Minimization and Ephemeral Processing

The Application processes and stores your note contents, passwords, and attached files strictly locally on your device. We do not collect, monitor, or store your daily activity on external servers. Network transmission is limited to a single, user-initiated authentication feature:

• Password Recovery Feature: To secure the local application, a user may optionally add an email address in the app settings. If the user initiates a password recovery request, this email address is protected using application-level asymmetric cryptography (encryption algorithms) and transmitted to our server via a proprietary binary protocol over a raw TCP transport layer. This custom encryption ensures the payload remains secure against unauthorized interception during transit. Our server processes this request **ephemerally** to immediately dispatch the recovery email. **Our server does not retain, log, or store the email address in any database** once the delivery is complete.

2. Local Database and Encryption

All notes, texts, and personal data created within the Application are automatically encrypted and stored strictly within a local database in your device's internal app-specific storage (sandboxed directory). This data is protected by cryptographic algorithms at the database level. Except for the transient password recovery request, your core data is completely inaccessible to other applications, the operating system, the developer, or any external servers.

3. Local Import and Export

The Application includes a built-in feature for backing up and transferring data (exporting and importing notes via files), as well as the ability to attach local media files. This process occurs strictly locally on the device under the user's full control:

• During Export: The encrypted backup file is saved to a directory chosen manually by the user.
• During Import: The Application only reads the backup or media file explicitly selected by the user for processing.

4. No Analytics and Third-Party SDKs

The Application does not contain any third-party advertising networks, tracking or analytics tools (such as Google Analytics or Firebase), or crash reporting libraries that could collect log data or secretly track your online activity.

5. Device Permissions and Storage Access

The Application requires internet permission solely to handle the ephemeral password recovery feature via our encrypted custom TCP binary protocol. Other requested storage permissions are used strictly to support the built-in file handling and the import/export features depending on your Android version:

• On Android 13 (API 33) and higher: The Application requests the READ_MEDIA_IMAGES permission solely to allow users to select and import local images into their notes.
• On Android 12 (API 32) and lower: The Application requests the READ_EXTERNAL_STORAGE permission to read backup files and media files from the device's shared storage based entirely on user selection.
• On Android 10 (API 29) and lower: The Application requests the WRITE_EXTERNAL_STORAGE permission to physically save (write) encrypted note export files to the device's external memory.

6. Children's Privacy

Since the Application functions locally and does not track online user data, we do not knowingly or unknowingly request, collect, or process personal data from children under the age of 13 (or 16 in the EU). The transient email-based password recovery system is not designed to log or collect data from minors.

7. Security of Transmission

We are committed to securing your data during network interactions. Even though standard high-level web protocols (like HTTPS/TLS) are not utilized, all information sent over our custom TCP binary protocol is strictly encrypted on the client side using strong cryptographic standards prior to leaving the device. However, please note that no method of electronic storage or transmission can be guaranteed as 100% secure.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. However, the core principle of extreme data minimization, ephemeral processing, absolute note privacy, and zero data logging will remain unchanged.

We can be contacted concerning this Privacy Policy by email at dwerty@yandex.ru.