Privacy Policy

1. Who we are and what this policy covers

This Privacy Policy describes how the mobile application Notebble (the "App") and its developer handle information. The App is published by its developer and owner (the "Developer", "we", "us", or "our"). This policy applies to the App on iOS and to any email correspondence you have with us about the App. By installing or using the App, or by contacting us, you acknowledge that you have read and understood this policy. If you do not agree with it, do not use the App and uninstall it.

For the purposes of the EU General Data Protection Regulation (GDPR), the UK GDPR, and similar laws, the Developer is the data controller for the limited personal data described in Sections 7 and 8 (support emails).

2. Contact details

For app support and for privacy or data-protection requests (including requests to exercise your rights under Section 12), email notebble-support@codeandsprites.online. This mailbox is hosted on Google Workspace.

3. The App does not collect personal data

The App is designed to work entirely offline and does not require any form of personal data from you. In particular, the App:

• does not ask you to create an account or to sign in;
• does not ask for your name, email address, phone number, or any other identifier;
• does not collect usage analytics, crash reports, or diagnostics automatically;
• does not display advertising and does not use advertising identifiers;
• does not track you across apps or websites;
• does not transmit your notes, reminders, attachments, or settings to the Developer or to any server operated by the Developer.

The Developer operates no backend service for the App and has no technical means to access the content you create in it.

4. Content you create is stored on your device only

Notes, freeform text, reminders, categories, attachment references, and app settings are stored in a local database inside the App's private storage area on your device. This data never leaves your device through the App, except where you yourself export, share, or send it using other software on your device.

The App stores this content in unencrypted (plaintext) form using the standard file protection provided by your device's operating system. The App does not apply any encryption of its own. Anyone who gains access to your unlocked device, to a device backup, or to your device's file system may be able to read your content. You are solely responsible for securing your device (for example with a passcode or biometric lock) and for any backups you create.

Uninstalling the App permanently deletes all content stored by the App on that device. The App offers no cloud sync, export, import, or backup feature, and the Developer cannot recover deleted or lost content.

5. Personal data you choose to enter in the App

The App does not require personal data, but it is a free-text tool and you may decide to type personal or sensitive information into a note, a reminder, or the freeform page, or to attach a file or image that contains such information. If you do so:

• you do so entirely at your own discretion and at your own risk;
• you remain the sole controller and owner of that information;
• the Developer never receives, sees, processes, or stores that information;
• the Developer accepts no responsibility and no liability for the loss, disclosure, corruption, or misuse of any such information, however caused.

We recommend that you do not store passwords, financial details, health data, or other highly sensitive information in the App.

6. Device permissions

The App may ask your operating system for the following permissions. Each is optional and is used only for the purpose described. Denying a permission does not affect your privacy; it only disables the related feature.

• Notifications — to deliver the reminders you schedule as local notifications. Reminders are scheduled on the device itself; no push-notification server is involved.
• Photo library / media / files — only when you tap "Image" or "File" to attach something to a note. The App stores a reference to the file you picked; it does not scan, upload, or index your library.
• Camera — declared for attaching photos to notes. Camera access is only ever triggered by an explicit action of yours.

7. Contacting us by email (support requests)

Contacting us is entirely optional and is never required to use the App. If you choose to email us, we receive and process:

• your email address and the name shown on your email account;
• the content of your message and of any replies, and any attachments or screenshots you include;
• any other information you decide to include, such as your device model, operating-system version, App version, or store purchase details;
• technical email metadata that is added automatically by email systems, such as the date and time of sending and message headers (which may include IP addresses of mail servers).

Purposes. We use this information only to read and answer your request, to investigate the problem you report, to handle any privacy or data-protection request you make, and to keep a record of our correspondence in case of a later question or legal claim. We do not use it for marketing, we do not add you to any mailing list, we do not sell or rent it, and we do not combine it with any other data.

Legal bases (GDPR / UK GDPR). We process support emails on the basis of our legitimate interests in answering the messages we receive and in keeping appropriate records (Article 6(1)(f)); where your email relates to your Pro subscription, on the basis that it is necessary to respond to you in connection with that contract (Article 6(1)(b)); and where you exercise a data-protection right, to comply with our legal obligations (Article 6(1)(c)).

Please send only what is needed. Do not include passwords, payment card details, health information, or the content of your private notes in an email. We do not ask for such information and do not need it to help you. Anything you choose to include is sent at your own discretion and at your own risk.

8. Email processing by Google (Google Workspace)

Our email service is provided by Google Workspace (Google LLC and its affiliates, including Google Ireland Limited for users in Europe). All emails you send to the address in Section 2, and our replies, are transmitted, stored, and processed on Google's infrastructure.

• Google acts as our data processor (service provider) under the Google Workspace terms and the Cloud Data Processing Addendum, which require Google to process this data only on our instructions to provide the email service, to keep it secure and confidential, and not to use it for advertising.
• Google may process and store email data in data centres located in the United States and other countries outside your country of residence, including outside the European Economic Area (EEA), the United Kingdom, and Switzerland. Such transfers are protected by the safeguards Google provides under applicable law, such as the EU–US Data Privacy Framework (and its UK Extension and the Swiss–US framework) and the European Commission's Standard Contractual Clauses (with the UK Addendum where applicable). You can request more information about these safeguards using the contact details in Section 2.
• Google's own data practices are described in the Google Privacy Policy (policies.google.com/privacy) and in the Google Workspace data processing terms (workspace.google.com/terms/dpa_terms.html).

Apart from Google as our email provider, we do not disclose your emails to anyone, except where we are required to do so by law or by a valid order of a court or public authority, or where necessary to establish, exercise, or defend legal claims.

9. Other third-party services

The App itself makes no network requests to the Developer. The only other network activity is limited to the following, each of which is governed by the privacy policy of the respective third party, not by this policy:

• App Store billing and RevenueCat. If you choose to purchase the optional Pro subscription, the purchase is processed by Apple through its in-app purchase system, and subscription entitlement status is managed by RevenueCat (Purchases SDK). These services may process transaction identifiers and an anonymous app-user identifier in order to validate and restore purchases. The Developer does not receive your name, payment details, or billing address. See Apple's and RevenueCat's privacy policies for details.
• Links you open. If you tap a link inside a note, the subscription-management page, or the "Report a problem" action, the App hands the link to your browser or store app. What happens after that is governed by those applications and websites.

The Developer does not control these third parties and is not responsible for their data practices.

10. Reporting a problem in the App

The "Report a problem" action in Settings → About does not collect or send anything. It simply opens the App's public listing in the Apple App Store, directly at the "Write a Review" step, so that you can leave a review or comment there. The App does not gather any technical details about your device, does not attach any information to the review, and does not receive a copy of what you write.

Anything you post on the App Store is submitted to Apple under its own terms and privacy policy, may be publicly visible together with your store nickname, and is stored and moderated by them, not by the Developer. Please do not include personal or sensitive information in a review. If you prefer a private channel, email us instead (Section 2).

11. Data retention and deletion

• App content lives only on your device and is under your control. You can delete individual notes and reminders inside the App, or delete everything by uninstalling the App. The Developer holds no copy.
• Support emails are kept only for as long as reasonably necessary for the purposes in Section 7 — to handle your request, to refer back to it if you contact us again, and to establish, exercise, or defend legal claims — or for longer where required by law. You can ask us to delete your correspondence at any time (Section 12).
• Store reviews are retained and can be edited or deleted according to the rules of the respective store.

12. Your rights

Apart from the support emails described in Sections 7 and 8, the Developer holds no personal data about you. To exercise any right you have in relation to that data, email notebble-support@codeandsprites.online from the address you used to contact us. We may need to verify your identity before acting on a request. We will respond within the time required by the law that applies to your request. We may refuse requests that are manifestly unfounded, excessive, or repetitive, or that the applicable law does not require us to fulfil.

• EEA, United Kingdom, and Switzerland (GDPR, UK GDPR, Swiss FADP): the right to access your personal data, to have it corrected, to have it erased, to restrict its processing, to object to processing based on our legitimate interests, and to data portability. You also have the right to lodge a complaint with a data-protection supervisory authority — in particular in the country where you live or work (in the UK, the Information Commissioner's Office, ico.org.uk). We would, however, appreciate the chance to address your concern first.
• Other countries: you may have rights under your local law, and we will honour them only to the extent that law applies to us.

We do not sell or share personal information, including for cross-context behavioural advertising.

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects on you.

13. Children

The App is not intended for or directed at children. Anyone under the age of majority in their country must not use the App or email us without the permission and supervision of a parent or legal guardian, who is responsible for their use of the App. If we learn that we have received personal data from a child without such permission, we will delete it.

14. Security

The App relies on the security features of your device and operating system. Support emails are protected by the security measures of Google Workspace and by access controls on our account. Email is transmitted using encryption in transit (TLS) where your own email provider supports it, but standard email is not end-to-end encrypted, and no method of transmission or storage is completely secure. The Developer makes no guarantee that the App, your device, or any email system is free from vulnerabilities and, to the fullest extent permitted by law, accepts no liability for unauthorized access to, or loss of, content stored on your device or information you choose to send by email. You send any information by email entirely at your own risk.

15. Changes to this policy

We may update this Privacy Policy from time to time, for example if a future version of the App adds new features or if we change our email provider. The current version is always bundled inside the App under Settings → About → Privacy Policy, together with its effective date. Continued use of the App after an update means you acknowledge the updated policy.

16. Contact

For help with the App, questions about this Privacy Policy, or to exercise your data-protection rights, email notebble-support@codeandsprites.online. Emails are processed by Google as described in Section 8.