Privacy Policy

Last Updated: March 2026 Version 1.1 noteliha

Contents

01Introduction
02Information We Collect
03Where Your Data Is Stored
04How Your Data Is Used
05Data Retention
06Security
07Third-Party Services
08Children's Privacy
09Your Data Rights
10Data Deletion
11Policy Changes
12Contact

Introduction

noteliha ("we", "our", or "the app") is a note-taking application developed and operated by Nikhil Lande under Navkon Labs.

This Privacy Policy explains how information is handled when you use the noteliha mobile application.

noteliha is designed with a privacy-first architecture. All note content is stored locally on your device. Google Drive backup is entirely optional and stores data only in your personal Google Drive account.

By using the application, you agree to the practices described in this Privacy Policy.

Information We Collect

noteliha collects minimal information necessary for the app to function.

2.1 — Google Account Information

If you choose to enable Google Drive backup, the app accesses limited information from your Google account through Google Sign-In. This may include:

Google account email address
Google display name
Google account identifier

This information is used only to authenticate your account and enable backup to your Google Drive. The app does not store or share your Google credentials.

2.2 — Notes and User Content

The app stores content you create, including:

Note titles and text content
Checklists, recipes, meal plans, and itineraries
Categories and pin status
Modification timestamps

This data is stored locally on your device. If you enable Google Drive backup, this content is also stored in your Drive account.

2.3 — Images

If you attach images to notes:

Images are stored locally on your device
Images are uploaded to your Google Drive when you use the backup feature
Images are not analyzed by the developer
Images are not sent to any server other than your own Google Drive account

2.4 — Support Metadata

To enable support and issue tracking, the app collects and stores limited metadata in a secure cloud database (Google Cloud Firestore). This metadata includes:

Google account identifier (user ID)
Google account email address
Google display name
App version number at time of sign-in
Device model (e.g. "Pixel 8 Pro")
Android version (e.g. "14")
Timestamp of first sign-in
Timestamp of most recent sign-in

This information is used only for support and diagnostic purposes — for example, to help identify and resolve issues you report. Your note content is never included in this metadata record.

Where Your Data Is Stored

3.1 — Local Device Storage

All data is stored locally on your device using a local database. This includes notes, categories, preferences, and attached images. Data remains on your device until you delete it.

3.2 — Google Drive Backup (Optional)

If you enable synchronization, the app stores backup files in your personal Google Drive account. Key details:

Each note is stored as an individual JSON file
Images are stored as binary files
Files are stored in a folder named .liha_notes_app
Only your Google account can access these files
The app uses the Google Drive drive.file permission

The drive.file permission allows the app to create, read, update, and delete only the files it creates. It cannot access any other files in your Google Drive.

3.3 — Google Cloud Firestore (Support Metadata)

The support metadata described in section 2.4 is stored in Google Cloud Firestore, a cloud-hosted database operated by Google. Each signed-in user has a single document record, identified by their Google account ID. This record contains only the metadata fields listed in section 2.4 — no note content is ever stored here.

Firestore data is stored in Google's infrastructure and governed by Google's privacy policy: policies.google.com/privacy

How Your Data Is Used

Data is used only to provide app functionality:

Creating and storing notes
Organizing notes and categories
Searching notes
Synchronizing notes and images with Google Drive when enabled
Restoring notes from backups

The developer does not sell, rent, or share user data with any third party.

Data Retention

Local Storage

Your data remains on your device until you delete it. Deleting a note moves it to a recycle bin where it can be restored or permanently removed. Permanent deletion removes the data from the device.

Google Drive Backup

Backup files remain in your Google Drive until you delete them. Signing out of the app does not automatically delete Drive backups. To remove backups:

Open Google Drive
Locate the .liha_notes_app folder
Delete the folder

Security

The following security practices are in place:

End-to-end encryption at rest — all normal note and drawing content is encrypted on-device using AES-256-GCM before being written to local storage or Google Drive. Notes are never stored in plaintext.
PBKDF2 key derivation — your encryption key is derived from your master password using PBKDF2-SHA256 with 100,000 iterations and a unique random salt, making brute-force attacks computationally expensive.
Secure credential storage — your master password and derived salt are stored in the platform secure keychain (Android Keystore / iOS Keychain), not in plaintext application storage.
Cross-platform salt synchronisation — when Google Drive backup is enabled, the encryption salt is stored in your Drive alongside your notes so the same key can be reconstructed on any device after reinstall, without ever transmitting your password.
All communication with Google APIs uses HTTPS
Google OAuth is used for Drive authentication

No method of electronic storage or internet transmission is completely secure. The developer cannot guarantee absolute security.

Third-Party Services

The app uses the following third-party services when Drive backup is enabled:

Google Sign-In — for account authentication
Google Drive API — for storing and retrieving backup files
Google Cloud Firestore — for storing support metadata (see section 2.4)

Google processes data according to its own privacy policy: policies.google.com/privacy

Children's Privacy

noteliha is not directed toward children under the age of 13. The developer does not knowingly collect personal data from children under 13. If you believe a child has provided personal information through the app, please contact support@navkon.com.

Your Data Rights

Depending on your location, you may have rights regarding your personal data, which may include accessing, correcting, deleting, or obtaining a copy of your data.

Since all data is stored locally on your device or in your own Google Drive account, you can exercise these rights directly — by deleting notes in the app, or by removing the .liha_notes_app folder from your Drive. For any other requests, contact support@navkon.com.

Data Deletion Instructions

Delete a Note

Open the app and delete the note
Empty the recycle bin to permanently remove it

Delete Google Drive Backup

Open Google Drive
Locate the .liha_notes_app folder
Delete the folder
Empty the Google Drive trash

Delete Support Metadata (Firestore)

To request deletion of your support metadata record from Firestore, contact the developer at the email listed in section 12. Include your Google account email address and your record will be permanently deleted within 30 days.

Delete All Data

Delete all notes inside the app and empty the recycle bin
Delete the .liha_notes_app folder from Google Drive
Contact the developer to delete your Firestore support metadata record
Uninstall the application

Changes to This Policy

This Privacy Policy may be updated from time to time. Any changes will be reflected in the updated policy with a revised Last Updated date.

Contact

For questions about this Privacy Policy, contact:

support@navkon.com

Developer

Nikhil Lande

Organization

Navkon Labs

Location

Kharghar, Maharashtra, India

Summary

Notes are stored locally on your device
Google Drive backup is optional — you choose when to sync
Images are backed up to your Drive when you use the backup feature
Limited support metadata (account ID, email, device model, Android version, app version, sign-in timestamps) is stored in Firestore for support purposes
The app does not sell, rent, or share your data
No advertising or tracking systems are used
You can delete your data at any time