1. Plain-language summary
Note Mate is a productivity app for notes, rich text, tasks, sticky notes, memories, study workflows, documents, reminders, widgets, optional AI help, optional Gmail connection, public share links, and optional Google Drive backup. Many core features work locally on your device. Online features use service providers only when you choose to use the relevant feature.
We do not sell private note content. We do not intentionally publish private notes.
Sign-in, Google Drive backup, public share links, Gmail, AI, ads, analytics, and notifications may involve third-party services.
You can deny Android permissions, avoid optional features, delete notes, revoke share links, disconnect Gmail, export files, and contact us for account requests.
Important: if you use Mate AI, connect Gmail, create a public share link, use Google Drive backup, or export a file, the information needed for that action can leave your device and may be processed by service providers or recipients under their own terms.
2. Scope and relationship to other services
This policy applies to Note Mate for Android and related services operated for the app. It applies when you install or use the app, create or import content, sign in, use Mate AI, connect Gmail, use Google Drive backup, create or view public share links, enable reminders, use widgets, contact support, receive notifications, or interact with ads or analytics.
This policy does not replace the privacy policies of third parties you independently use, such as Google Play, Google Drive, Gmail, Firebase, Cloudflare, Supabase (for public share-link storage), Google AdMob, Groq, OpenRouter, your Android device manufacturer, your keyboard, messaging apps, file managers, browser apps, or recipients you share content with.
3. Categories of information Note Mate may process
The exact data depends on the features you use, the settings you choose, the permissions you grant, your region, and the app build or configuration.
| Category | Examples | Source | Typical purpose |
|---|---|---|---|
| Account and profile data | Email address, display name, profile photo URL, Firebase user ID, Google Sign-In identifiers, provider details, account deletion status. | You, Firebase Authentication, Google Sign-In. | Sign-in, account recovery, backup identity, share-link management, abuse prevention, deletion workflows, and support. |
| Notes and productivity content | Note titles, body text, rich text formatting, folders, tags, collections, tasks, checklists, sticky notes, study cards, templates, links, drawings, handwritten strokes, PDFs, attachments, and metadata. | You create, import, capture, scan, attach, or edit it. | Provide note editing, organization, search, reminders, export, restore, Google Drive backup, public share links, and optional AI assistance. |
| Media, voice, OCR, and memory data | Images, screenshots, audio recordings, voice notes, image labels, OCR text, digital ink recognition results, memory descriptions, timestamps, app names, URLs, and file metadata. | You add media, grant media/microphone permissions, or enable capture features. | Attach media, create memories, make content searchable, transcribe or label items, resurface memories, and support exports or backup. |
| Reminder, calendar, and location data | Reminder title, date/time, repeat rules, notification state, alarm settings, calendar event details, location name, approximate or precise location, latitude/longitude for location reminders. | You, Android permissions, Google Play services location, calendar providers. | Schedule reminders, create meeting notes, show notifications, trigger location reminders, and restore alarms after reboot. |
| AI request data | Prompts, selected command, selected model, note text or context you submit, generated output, model settings, request status, errors, and technical request metadata. | You initiate Mate AI actions. | Generate summaries, rewrites, grammar help, continuations, tags, explanations, study material, and note organization suggestions. |
| Gmail connection and message data | Connected Gmail address, message headers and content requested by inbox or search features, and attachment files you choose to download. | You connect Gmail and use a mail, search, widget, daily overview, meeting preparation, or AI feature. | Show inbox information, find related messages, prepare email responses, and send messages you request. |
| Google Drive backup data | Encrypted backup files, Google Drive file IDs, backup timestamps, restore status, and backup preferences. | You connect Google Drive and start or enable backup or restore. | Back up and restore app data in your Google Drive account. |
| Public share-link data | Note title and shared content snapshot, a random link token, owner account ID, optional PIN verifier, expiry or view limits, and revocation/view metadata. | You choose to create a share link for a note. | Host the link page, protect it with optional controls, track its status, and let you list or revoke your links. |
| Device, app, diagnostics, and security data | App version, package name, Android version, device model, network state, Firebase installation ID, push token, crash data, performance data, logs, App Check or Play Integrity signals, tamper/root/debug/emulator indicators, remote config values. | Your device, app runtime, Firebase, Google Play services. | Operate the app, send notifications, improve reliability, prevent abuse, protect cloud features, diagnose crashes, and respond to incidents. |
| Ads, analytics, and campaign data | Feature usage events, ad impressions, ad clicks, approximate device/app information, consent status, campaign tile interactions, and identifiers handled by analytics or advertising SDKs. | App events, Firebase Analytics, Google AdMob, device settings. | Measure usage, support free features, improve design, show ads where enabled, and comply with consent requirements. |
| Support communications | Your email address, messages, screenshots, logs, diagnostics, app version, device information, and other information you choose to provide. | You contact us. | Respond to requests, troubleshoot, verify ownership, investigate privacy or security concerns, and improve the app. |
4. How we use information
- To provide core note-taking, rich text editing, sticky notes, tasks, memories, PDFs, study tools, search, folders, widgets, recycle bin, import, and export features.
- To authenticate accounts, maintain account security, and connect signed-in features such as Google Drive backup and public share-link management.
- To process AI requests you initiate, return generated output, manage model availability, enforce rate limits, and reduce abuse.
- To back up, encrypt where supported, upload, list, download, restore, merge, and delete backup data and metadata.
- To schedule user-created reminders, alarms, meeting notes, memory resurfacing, and notification delivery.
- To create, protect, display, manage, and revoke public share links that you request.
- To detect abuse, verify app integrity, protect cloud resources, enforce security controls, and prevent fraud or tampering.
- To measure app usage, improve accessibility, polish user experience, diagnose crashes, tune remote configuration, and maintain stability.
- To comply with law, respond to lawful requests, enforce rights, protect users, and handle account deletion or privacy requests.
5. Legal bases and lawful purposes
Where the EU GDPR, UK GDPR, or similar laws apply, we rely on one or more legal bases depending on the feature and context.
| Legal basis | Examples in Note Mate |
|---|---|
| Performance of a contract | Creating notes, storing local content, opening files, restoring backups, signing in, creating share links, and providing requested app features. |
| Consent | Optional Android permissions, personalized ads where required, microphone, media, notifications, precise location, background location, calendar access, Google Drive connection, and AI requests that include content you choose to submit. |
| Legitimate interests | Security, abuse prevention, reliability, crash diagnostics, app improvement, fraud prevention, and protecting cloud infrastructure. |
| Legal obligation | Responding to valid legal requests, keeping records required by law, and handling rights requests. |
| Vital interests or public interest | Rare circumstances where processing is necessary to protect safety, prevent serious harm, or comply with emergency legal obligations. |
For India, we process personal data for lawful purposes with notice and consent where required, and for legitimate uses permitted by applicable law. For U.S. state privacy laws, including California where applicable, this policy describes categories of data, purposes, sharing, retention, rights, and contact methods.
6. Local storage, cloud storage, and encryption
Local device storage
Much of Note Mate's active data is stored locally in the Android app sandbox, including notes, sticky notes, memories, PDF references, settings, reminder state, and cached information. Android's app sandbox helps isolate this data from other apps, but data on your device may still be exposed if your device is unlocked, rooted, compromised, backed up outside Note Mate, accessed through debugging tools, or infected with malware.
The optional Private User Insights feature is off by default. If enabled, deterministic rules analyze active, unlocked notes and unfinished tasks on your device to show descriptive topic, writing, search, visit, deadline, timeline, missing-information, and possible conflicting-claim candidates. Search terms are stored only as individual local word counts; note-open and broad feature-area visit counts are stored in private app storage. Full search queries and generated findings are not stored; this feature keeps its analysis data in private app storage and does not upload or export it, and it does not make personality or mental-health conclusions. You can disable the feature or delete its local counters in Memory Analytics. Disabling also clears those counters; your notes are not changed.
Cloud storage and online processing
If you choose Google Drive backup, the backup is stored in your Google Drive account. If you create a public share link, the selected note snapshot is sent to the share-link service described below. Other online features, such as AI or Gmail, transmit only the information needed for the action you request.
Encryption and passwords
Note Mate may use Android Keystore-backed protection, encrypted Google Drive backup flows, protected `.links` exports, HTTPS, Firebase Authentication, App Check or Play Integrity, and access controls for online features. Encryption availability varies by feature. Share-link snapshots are encrypted at rest only when the share service's encryption key is configured; older links or a service deployment without that key may not be encrypted at rest. Anyone with access to an unencrypted stored snapshot or a working share link (and any required PIN) can view its content. If you protect an export or backup with a PIN/password, losing that PIN/password may make encrypted content unrecoverable.
7. Mate AI assistant
Mate AI is optional. It can help summarize, rewrite, continue, correct, tag, explain, structure, and study from note content. Built-in online AI requests are routed through a Cloudflare Worker to the configured third-party AI provider, currently including Groq; other providers may be available when enabled in the app. The provider can vary with availability, configuration, user settings, rate limits, and selected models.
When you use Mate AI, the prompt, selected command, selected model, note text or context you provide, generated output, and technical request metadata may be sent to the backend and AI provider. Provider retention and use are governed by that provider's terms and settings. You should not submit highly sensitive information to AI unless you are comfortable with that processing. AI output may be inaccurate, incomplete, offensive, or unsuitable; review output before relying on it.
AI choice: Note Mate is designed so AI actions happen when you initiate them. Avoid using AI on content you would not want processed by a third-party AI service.
8. Gmail connection
Gmail connection is optional. It is used to show inbox context inside Note Mate, help you find emails related to a search or upcoming meeting, and let you send email from the app. Gmail access is not required for core note-taking features. When you connect, Google asks you to authorize two Gmail permissions:
Read Gmail messages
gmail.readonly lets Note Mate read messages from the connected mailbox. This is a mailbox-level read permission, not a permission limited to one selected email. Note Mate uses it for the specific inbox, search, attachment, and meeting-preparation features described below. The app does not use this access to send, edit, delete, or mark messages as read.
Send Gmail messages
gmail.send lets Note Mate send messages from the connected Gmail account. It is separate from the read permission and does not itself provide access to read the mailbox. Note Mate does not send a message just because Gmail is connected.
When Note Mate reads email
Gmail messages are requested directly from Google's Gmail API. While Gmail remains connected, some reads happen when an app feature refreshes, not only after you tap an individual email:
- The Daily Overview and the home-screen widget can request recent unread inbox messages to display there.
- Mate AI mail actions can load recent inbox messages when you ask it to check or use your email.
- Mail search checks inbox message subjects for the words you search for.
- If calendar access is enabled, a scheduled meeting-preparation feature can search inbox subjects for terms from an upcoming meeting title. It may add matching email subjects and sender names to the meeting note it creates.
- If you choose to open an attachment, Note Mate downloads that attachment for the requested action. Gmail attachments larger than 15 MB are not downloaded by this feature.
These features do not archive your mailbox in Note Mate. The read permission is broad enough for Google to authorize reading Gmail messages, but the app's implemented requests are made for the features above. Gmail content you ask Mate AI to summarize, explain, or use for a reply is sent to the configured AI provider with your request. Ordinary inbox display and mail search do not send message contents to the AI provider.
Sending email and keeping access under your control
Note Mate sends a message only when you request a send action. Before an AI-written message is sent, you can review it and must confirm the send. Note Mate stores the connected Gmail address in private app storage, but does not store your Gmail password or persist the access token. Google Play services provides access tokens when a Gmail API call is made.
Disconnecting Gmail: Disconnect in Note Mate Settings clears the saved Gmail address and stops the app's connected-mail features until you connect again. This local disconnect does not remove Note Mate's authorization from your Google Account. To revoke Google's authorization as well, remove Note Mate from your Google Account's third-party connections or permissions. Gmail is also governed by Google's terms and privacy policy.
9. Backup, restore, and Google Drive
If you connect Google Drive, Google may process your account identity, authorization tokens, Drive metadata, file IDs, and backup files under Google's terms and privacy policy. Note Mate uses Drive access for app backup and restore workflows, such as creating, listing, updating, downloading, and deleting backup files.
Backups may include notes, tasks, folders, tags, memories, rich text state, media attachments, PDFs, settings, reminders, and metadata. Restore may import, merge, or overwrite data depending on the feature flow. Revoking Drive access may stop future backup or restore until you reconnect. Deleting local app data does not necessarily delete backups already stored in Drive.
11. Android permissions and sensitive access
| Permission or access | Why it may be requested | Your control |
|---|---|---|
| Internet and network state | Sign-in, Google Drive backup, AI, Gmail, public share links, ads, notifications, and diagnostics. | Online features need network access. Some local features may work offline. |
| Notifications, vibration, alarms, and boot completed | Task reminders, meeting alarms, memory resurfacing, study sessions, and restoring scheduled reminders after reboot. | Manage through Android notification, alarm, and app settings. |
| Microphone and audio files | Voice notes, audio signs, audio attachments, recording workflows, and related memory features. | Grant, deny, or revoke in Android permissions. |
| Photos, videos, media, and file access | Attaching images, opening PDFs, importing files, saving exports, screenshot workflows, and backing up selected media. | Grant selected media or revoke access depending on your Android version. |
| Location | Location-based reminders and features that need a place trigger. | Choose approximate, precise, while-in-use, all-the-time where available, or deny in Android settings. |
| Calendar | Meeting notes, calendar-based reminders, and event integration. | Grant or revoke through Android settings. Calendar providers have their own policies. |
| Biometric authentication | Unlocking protected app areas using Android biometric prompts. | Android handles biometric templates. Note Mate does not receive your fingerprint or face data. |
| System overlay and foreground services | Optional screenshot monitor, quick capture overlays, long-running capture workflows, Google Drive backup, or reminder reliability. | Controlled through Android special access, battery, and app settings. |
13. Service providers and third parties
Note Mate may use service providers, SDKs, and platform services, including:
- Google Firebase for authentication, app analytics, and messaging services where enabled in the app build.
- Cloudflare Workers to process built-in AI requests and public share-link requests.
- Supabase for public share-link records and snapshots, which are encrypted at rest when the service's encryption key is configured.
- Google services for Google sign-in, Gmail API access you authorize, Google Drive backup, Android location services, and device services.
- Google Drive APIs for user-authorized backup and restore.
- Google AdMob for advertising where enabled.
- AI providers such as Groq or OpenRouter for Mate AI requests, depending on app configuration.
- Google ML Kit and related ML services for OCR, image labeling, digital ink, and similar features depending on SDK behavior.
- Email delivery, hosting, diagnostics, security, and support tools used to operate and troubleshoot the app, including transactional account messages.
We may disclose information to service providers for the requested feature, to recipients or apps you direct, in response to valid legal requests, to protect rights and safety, to investigate abuse, or during a merger, acquisition, restructuring, or transfer of app operations.
No sale of private note content: Note Mate does not sell your private note content. If advertising or analytics disclosures are considered a "sale" or "sharing" under applicable law, you may have opt-out rights through device settings, consent controls, or by contacting us.
14. Ads, analytics, diagnostics, and private insights
Note Mate uses Firebase Analytics for app events and Google AdMob for advertising where enabled. These services may process app events, device/app information, ad impressions, ad clicks, consent status, performance information, and related identifiers. Diagnostic and security data may also be processed to investigate app errors and protect online features.
Analytics and diagnostics help improve reliability, accessibility, feature design, and performance. Ads may support free features. Any ad personalization or measurement options depend on your settings and applicable consent choices. Note Mate does not send note content to AdMob for ad targeting.
Private Insights is a separate, optional on-device analytics feature and is off until you enable it. When enabled, Note Mate analyzes active, unlocked notes and unfinished tasks on your device using lightweight topic clustering and explainable rules. Search terms, note opens, and broad feature-area visits are stored as local counters; full search queries and generated findings are not stored. On compatible Android devices, Android's system-provided Gemini Nano model may refine topic labels using derived topic keywords; raw note text is not sent to that model or to a network AI. Private Insight findings and counters stay in private app storage and are not uploaded or exported by this feature. You can turn it off or delete its counters in Analytics; turning it off clears the counters without changing your notes.
15. Security measures
We use safeguards appropriate to the app, including Android sandboxing, HTTPS, Firebase Authentication, server-side rules, App Check or Play Integrity where configured, release build shrinking and obfuscation, Android Keystore-backed protection for selected sensitive values, encrypted backup or export flows where supported, permission prompts, access controls, and abuse prevention.
The app may detect rooted devices, emulators, debugging, tampering, outdated versions, or integrity failures and may restrict sensitive online features. No app, network, device, provider, or encryption method is perfectly secure. You can improve your own security by keeping Android and Note Mate updated, using a strong device lock, protecting backup passwords, reviewing and revoking share links, limiting AI submissions, and deleting exported files you no longer need.
16. Retention and deletion
We keep information only as long as reasonably necessary for the purposes described in this policy, unless a longer period is required or permitted by law, security needs, fraud prevention, backups, or technical constraints.
| Data type | Typical retention |
|---|---|
| Local notes, memories, attachments, widgets, and settings | Remain on your device until you delete them, clear app data, uninstall, or an app feature removes them. |
| Recycle bin content | May remain until permanently deleted or until an automatic cleanup rule applies. |
| Google Drive backups | Remain in your connected Google Drive account until deleted through Note Mate, Google Drive, or account tools. |
| Public share links | The content snapshot and link metadata remain until the link is revoked, reaches its expiry and is cleaned up, or is removed under an applicable request; operational backups or logs may persist for a limited period. |
| Account, Gmail connection, security, and diagnostic records | The saved Gmail address remains until you disconnect Gmail or clear app data. Other account and diagnostic records are retained as needed for account operation, security, legal compliance, reliability, and troubleshooting. |
| AI request records | May be temporarily processed by backend services and AI providers according to configuration and provider policies. |
| Support communications | Retained while needed to answer your request, maintain records, and resolve disputes or security issues. |
Account deletion requests are handled by taking reasonable steps to delete or de-identify personal information associated with the account, subject to legal, security, fraud-prevention, Google Drive backup, public share-link, exported-file, and technical limitations. Deleted information may persist for a limited time in backups, logs, recipient copies, or third-party systems outside our control.
17. Your choices and privacy rights
Depending on your location, you may have rights to access, know, correct, delete, restrict, object to, export, or receive a copy of personal information; withdraw consent; opt out of certain advertising or sharing; limit certain sensitive data uses; complain to a regulator; or authorize another person to act for you.
Controls inside or around Note Mate
- Create, edit, export, delete, and permanently delete many notes directly in the app.
- Grant, deny, or revoke Android permissions in device settings.
- Avoid or disable optional features such as AI, Google Drive backup, Gmail, screenshot monitoring, location reminders, calendar integration, widgets, or personalized ads where controls are available.
- Revoke public share links you created and disconnect Gmail in Settings.
- Delete exported files, Drive backups, and downloaded or forwarded share copies in the locations where you saved them.
- Sign out, request account deletion, or contact support for rights requests.
California and other U.S. state privacy laws
Where applicable, residents may request information about categories and specific pieces of personal information collected, categories of sources, purposes, categories of third parties, disclosure or sharing, correction, deletion, opt-out of sale or sharing, limitation of certain sensitive personal information uses, and non-discrimination for exercising rights.
European Economic Area, United Kingdom, and Switzerland
Where applicable, you may have rights of access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and complaint to a supervisory authority.
India
Where applicable, you may have rights to information about processing, correction, completion, updating, erasure, withdrawal of consent, grievance redressal, and nomination where permitted by law.
How to exercise rights
Contact shreyaslinks00008@gmail.com. We may need to verify your identity and account ownership. Some requests may be limited by law, technical feasibility, security needs, backup limitations, fraud prevention, records we must keep, or rights of other users.
18. Children and students
Note Mate is a general productivity app and is not directed to children under 13 or under the age required by local law for consent to online services. We do not knowingly collect personal information from children without appropriate consent. If you believe a child has provided personal information without required consent, contact us and we will take reasonable steps.
Students may use Note Mate for study, but users should avoid storing information they are not authorized to store, including another person's private, school, medical, financial, or confidential records.
19. International transfers
Note Mate and its providers may process information in countries other than where you live. These countries may have different data protection laws. Where required, we rely on appropriate safeguards such as contractual protections, provider compliance programs, or other mechanisms permitted by law.
20. Changes to this policy
We may update this policy when Note Mate changes, providers change, laws change, security practices improve, or app store requirements change. If changes are material, we may notify you in the app, by email, through a campaign tile, or through another reasonable method. The effective date shows when this version applies.
21. Contact and grievance redressal
For privacy questions, rights requests, account deletion, security concerns, or grievance redressal, contact:
Note Mate / Shreyas Links
Email: shreyaslinks00008@gmail.com
Please include enough information to understand your request, such as your account email, the feature involved, your region, and what action you want. Do not send backup PINs, passwords, private notes, or sensitive files unless we specifically ask for a secure troubleshooting purpose.