Privacy Policy

App: Note Bag  |  Package: com.promo.dreaming.noteplusapp  |  Last updated: August 15, 2026

Want to delete your data? Jump to the Data Deletion section.

This Privacy Policy explains how Note Bag ("the App", "we", "our") handles your information. We are committed to protecting your privacy. The App is designed to store your notes, tasks, and alarms locally on your device. We do not sell, rent, or share your personal data with third parties, except as described below.

1. Information We Collect

The App may access the following data only when you explicitly use the relevant feature:

Permission	Purpose	Storage
Camera	Capture photos to attach to your notes	Local only
Read Contacts	Attach contact information to a note for reference	Local only
Record Audio	Record voice memos to attach to notes	Local only
Notifications	Show alarm and task reminder notifications	Local only
Internet	Google Drive backup/sync, push notifications, ads, anonymous device registration	External (optional)
Storage / Files	Save attachments (images, documents) for notes	Local only
Device ID & Country	An anonymous, randomly-generated install identifier, your device model, app version, and country (from SIM/network carrier or device locale, not GPS) are sent to our own server on app launch, so we can recognize returning installs and understand our user base	External (our server)
Advertising ID	The App shows ads through Google AdMob, which reads your device's Android Advertising ID to measure ad performance and to select which ads to show. This is separate from the anonymous install identifier described below, and it is controlled by you in Android Settings — see Section 6	External (Google AdMob)
Note content (Edit Note at Web)	If you use the optional "Edit Note at Web" feature, your note content is encrypted on your device and temporarily relayed through our server so you can continue editing it in a browser	External (encrypted, temporary)

2. Data Storage

All notes, tasks, alarms, attachments, and settings are stored exclusively on your device using an encrypted local SQLite database. We do not have access to this data.

If you use the optional Google Drive backup feature, your data is synced to your own personal Google Drive account under your control. We do not have access to your Google account or Drive files.

3. Device Registration & Anonymous Analytics

On app launch, the App sends a small amount of device metadata to our own server (mondalit.xyz) over an encrypted (HTTPS) connection:

• A randomly-generated device identifier — not your Android Advertising ID, not tied to your Google account, and not derived from any hardware serial number. It resets if you uninstall and reinstall the App. (Your Android Advertising ID is separately collected by Google AdMob for advertising — see Section 6. It is never sent to our server and is never linked to this identifier.)
• Your device manufacturer and model
• Your app version
• Your country, detected from your SIM/network carrier or device locale settings — never from GPS or precise location

This information is used only for basic app analytics (e.g. understanding how many devices use the App and in which countries) and is not sold, rented, or shared with any third party. Your notes, tasks, and other content are never included in this data — it is limited to the device metadata listed above.

4. Edit Note at Web (End-to-End Encrypted)

The App includes an optional "Edit Note at Web" feature that lets you continue editing a note from a computer browser. This feature is end-to-end encrypted and works as follows:

• When you choose to edit a note on the web, your device generates a random encryption key and displays it, along with a one-time session ID, inside a QR code shown on our web page.
• Your note content is encrypted (AES-256-GCM) on your device before it is sent. Our server only ever receives and stores the encrypted, unreadable version.
• The encryption key never touches our server — it exists only in the QR code and inside your device and browser for the duration of the session.
• When you finish editing, the encrypted session data is deleted from our server. If a session is abandoned without being finished, it is automatically purged after a short retention period.

Because we never have access to the encryption key, we cannot read your note content at any point during this process — our server only ever relays an encrypted payload it cannot decrypt.

5. Request Data Deletion

Note Bag (developed by pritom.app@gmail.com, package com.promo.dreaming.noteplusapp) gives you full control over your data:

• Note content — All notes, tasks, alarms, and attachments are stored only on your device; simply uninstall the App or clear its storage (Android Settings → Apps → Note Bag → Clear Data / Uninstall) to permanently delete this data. We never receive a readable copy of it, so there is nothing for us to delete on our end. If you used the "Edit Note at Web" feature (Section 4), the encrypted, unreadable session data is deleted automatically when you finish editing, or shortly after if abandoned.
• Anonymous device registration record (device ID, device model, app version, country — see Section 3) — To request that we delete this record from our server, email us at pritom.app@gmail.com with the subject "Note Bag Data Deletion Request". Include your device model and approximate install/registration date so we can locate the correct record. We will delete it within 30 days of a verified request.

6. Third-Party Services

The App integrates the following third-party services that may collect data under their own policies:

• Google AdMob — Displays advertisements. AdMob collects your Android Advertising ID along with device and ad-interaction data in order to select ads, measure their performance, and detect invalid activity. Ads shown in the App may be personalized, meaning Google may use this data to choose ads based on your interests. We never send your notes, tasks, attachments, or the identifier described in Section 3 to AdMob. See: Google Privacy Policy and how Google uses data from apps that use its services
• Firebase (Google) — Used for push notifications (FCM) only. See: Firebase Privacy
• Google Drive API — Used only if you enable backup. Data goes to your personal Google account.

Your advertising choices. You control the Advertising ID from your device, and these settings apply to Note Bag along with every other app:

• Opt out of personalized ads — Android Settings → Privacy → Ads → "Opt out of Ads Personalization". You will still see ads, but they will not be selected based on your interests.
• Reset or delete your Advertising ID — the same Settings screen. Deleting it stops apps, including this one, from receiving the identifier at all.

If you are in the European Economic Area, the United Kingdom, or Switzerland, applicable law requires your consent before personalized ads are shown. Where consent is required, it is collected through Google's consent mechanism, and you may withdraw it at any time using the device settings above.

7. Permissions We Do NOT Abuse

• Contact data is never uploaded to any server — it stays in your note locally.
• Audio recordings are never transmitted — stored only in your note's private app storage.
• Camera photos are never shared outside the app without your action.

8. Children's Privacy

The App is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided information through this app, please contact us.

9. Data Security

Your note data is stored in an encrypted SQLite database on your device. We implement reasonable technical measures to protect your data. However, no method of storage is 100% secure, and we cannot guarantee absolute security.

10. Your Rights

Since all note content is stored locally on your device, you have full control:

• Delete data — Clear app data via Android Settings → Apps → Note Bag → Clear Data
• Revoke permissions — Via Android Settings → Apps → Note Bag → Permissions
• Delete the app — Uninstalling removes all locally stored data
• Delete your device registration record — See Section 5 above for how to request this.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the App after changes constitutes acceptance of the new policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy — including requests to delete your data (see Section 5) — please contact us at:
Email: pritom.app@gmail.com
GitHub: github.com/pritomkucse