Last updated: April 14, 2026
Notetify is built on one principle: your data belongs to you. Notetify does not collect, transmit, store, or process any of your personal information on external servers. Every feature in Notetify operates entirely on your device. There are no analytics SDKs, no tracking pixels, no telemetry, and no server-side components. When you delete the app, your data is gone — because it was never anywhere else.
To provide its core privacy-focused features, Notetify requires the following permissions. Each is used strictly for on-device processing:
Used exclusively for document scanning. Images are processed locally and never transmitted.
Used exclusively for voice-to-text transcription. Audio is processed on-device using Whisper AI.
Used for app lock authentication only. Biometric data is never accessed or stored by Notetify.
Used to save encrypted notes, tasks, and documents locally on your device.
Used for local task reminders only. No push notification servers are involved.
Used solely to ensure task reminders are delivered reliably on time.
All data stored by Notetify is protected by multiple layers of encryption. Your database is encrypted using SQLCipher with 256-bit AES encryption. The encryption key is derived from your PIN or password using PBKDF2 with HMAC-SHA256 and a unique per-device salt, calibrated to take approximately 500 milliseconds per derivation attempt — making brute-force attacks computationally impractical. Scanned document images are individually encrypted using AES-GCM authenticated encryption with sub-keys derived via HKDF, ensuring both confidentiality and tamper detection. If biometric authentication is enabled, your master key is stored in the Android Keystore (hardware-backed when available) or the iOS Keychain (Secure Enclave on modern devices). Notetify never stores your PIN, password, or biometric data directly.
Notetify uses on-device AI (Whisper) for speech-to-text conversion. Audio is processed entirely in your device's memory and is never written to disk as a raw audio file unless you explicitly save it as a voice note. No audio data is transmitted to any external server. The voice recognition model is downloaded once over the internet and stored locally on your device. After download, transcription works completely offline. The model download requires an internet connection and uses standard HTTPS; no personal data is sent during this process.
Document scanning and text recognition (OCR) are powered by Google ML Kit, which runs entirely on your device. Scanned images never leave your phone. Extracted text is stored in your encrypted local database for search purposes. Each scanned page is encrypted individually using AES-GCM before being written to your device's storage. Thumbnails are generated locally and are also encrypted. When you delete a document, all associated encrypted files and database entries are permanently removed.
Task reminders are scheduled using your device's local notification system. No push notification server is involved — reminders are triggered entirely by your device's alarm manager. Notification content (task titles and descriptions) never leaves your device. Notetify requests notification and exact alarm permissions only when you create a task with a reminder, and you can revoke these permissions at any time through your device settings.
You maintain absolute sovereignty over your data. Notetify only transmits your information when you explicitly initiate a sharing action (such as exporting a note or sharing a document). We never share data automatically with third parties or outside your device's secure environment.
Notetify is suitable for users of all ages. We do not collect personal information from any user, regardless of age, as all data remains exclusively on your device.
If you have any questions about this Privacy Policy or Notetify's data handling practices, please contact us at:
[email protected]If we make any changes to this Privacy Policy, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.