1 Overview & Philosophy

NoteFlow ("the App") is developed and maintained by andytomg. This Privacy Policy explains how NoteFlow handles your data across all supported platforms (including Android, iOS, and macOS).

Our fundamental philosophy is data minimization and local sovereignty. We believe your private notes, thoughts, tasks, and schedules belong exclusively to you.

2 Data Storage & Collection

NoteFlow does not collect, transmit, sell, or rent your personal information to external servers or third parties.

3 Device-to-Device Sync (Bluetooth & Local Network)

NoteFlow includes a direct, peer-to-peer sync feature enabling you to synchronize notes between two of your own devices:

• Bluetooth Low Energy (BLE): Used solely as a local proximity beacon to announce device presence to nearby receivers.
• Local Network (LAN / Wi-Fi): Database transfer takes place directly over your local Wi-Fi router or Mobile Hotspot using an ephemeral local HTTP connection on port 8765.
• No Cloud Intermediaries: At no point during synchronization does your data pass through any third-party server, cloud relay, or external router.

4 Biometric Security (App Lock)

NoteFlow offers an optional App Lock feature using your device's biometric authentication (Face ID, Touch ID, or Android Biometrics):

• Authentication is handled entirely by your operating system's hardware-backed Secure Enclave / Keystore.
• NoteFlow only receives a true/false verification token from the OS.
• NoteFlow never captures, stores, or transmits your fingerprint, facial scan, or passcode.

5 Local Notifications & Reminders

When you set a due date for a note, NoteFlow schedules reminder alerts locally on your device using the operating system's local notification daemon. The App does not use remote push notification services (such as APNs or FCM push servers) to trigger reminder alerts.

6 No Third-Party Tracking or Ads

NoteFlow is completely free of third-party tracking:

• Verified No analytics SDKs (e.g. Google Analytics, Mixpanel, Firebase Analytics).
• Verified No advertising frameworks or ad trackers.
• Verified No crash reporting telemetry sending data to third parties.

7 Data Export, Retention & Deletion

Because all data is stored on your device:

• Export: You can export your entire database as a structured JSON file or category summary as a PDF at any time via Settings.
• Deletion: You can wipe or reset the database inside Settings. Uninstalling NoteFlow or clearing the app data permanently deletes all stored records from your device immediately.

8 Children's Privacy

NoteFlow does not knowingly collect or solicit any personal information from children under the age of 13. Because the App operates entirely offline with zero data collection, it is safe for users of all ages.

9 Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Effective Date". We encourage you to review this policy periodically.