Privacy policy

Your notebook

Anytime Notes keeps notes, checklists, selected photo copies, folders, tags, templates, retained versions, dates, reminders and settings in private app storage on your device. There is no Anytime Notes account, hosted notebook service, in-app advertising, analytics of your notebook contents or searches, app-managed crash upload, AI or collaboration service. Notebook content is not sent to an Anytime Notes server.

Sharing and direct device sync

Readable exports, clipboard copying, camera/document providers and user-chosen email, messaging or storage apps can receive content you intentionally give them. These providers may use their own servers and policies. A selected backup folder can be a cloud provider even though Anytime Notes has no hosted cloud sync. Disclosed copies cannot be recalled.

Password-encrypted note files can be saved or handed to another app. Recipients decrypt with the separately shared password and explicitly import new local copies; those copies are unprotected until the recipient protects them. There is no sharing-password reset or remote revocation.

Direct sync connects reachable IPv4 peers under pinned mutual TLS. Pairing uses public device identities, a short-lived QR invitation and approval on both phones; optional scanning camera frames stay local and are not saved. Saved public pins, names and routing hints stay on this installation and are excluded from notebook backups. Tap Sync now on both phones. Sync transfers selected tracked notes/checklists/photos and their causal version/deletion information; protected content is re-encrypted under each receiver's independent vault. Keys, recovery passwords, Premium entitlement, settings and unrelated history are not sent. Conflicts retain copies and deletion requests require local review. Some committed batches can remain after an interrupted session; retry reconciles them. There is no discovery, DNS lookup, signalling/STUN/TURN/relay service, app-managed Wi-Fi Direct or unattended background sync. Removing trust cannot delete copies already received.

Google Play and Premium

Google Play handles optional Premium purchases using its own account/payment interface. The app requests product/purchase information, launches your chosen purchase and acknowledges verified purchases. It receives signed purchase records, product identifiers, purchase tokens and state, and retains a local entitlement cache excluded from notebook backups. The app does not receive payment-card numbers or give Play an Anytime Notes account/profile ID. Existing internal-test versions can reconcile purchases on startup or foreground return. In the next app version, Google Play connection is off by default until you allow it in Premium settings; turning it off stops new app-initiated store requests and preserves signed local Premium evidence. After you turn it on, store checks may run automatically. Withdrawing does not recall queued SDK events or delete Google’s existing records. Google Play Billing and its transport library also send billing-service interaction and diagnostic events to Google. Depending on the event, these can include purchase or billing state, API result/error codes, limited exception information, app/package and library versions, Android version, device brand/model/manufacturer and build information, memory and network characteristics, locale/time-zone information, and SDK client/session identifiers. These events support billing operation and service analytics, such as diagnosing failures and improving reliability; they are not advertising pixels or analytics of your notebook contents or searches. SDK events can occur during automatic store checks on startup or foreground return, even without a purchase, in existing internal-test builds. The next app version adds the connection choice described above. The Google SDK does not provide a separate switch for its analytics while using billing; its necessary-service and analytics processing must be distinguished in the release assessment. Optional purchase history is used to complete, acknowledge and restore Premium. We do not send Google your notes, photos, note searches, vault credentials or the reviewer access code through the Billing library. Google processes its service data under its own policies; this is not limited to short-lived in-memory processing. Deleting Anytime Notes removes its local storage but does not delete Google's transaction or SDK service records. We cannot delete those records on Google's behalf; use Google's privacy/account controls or contact Google. Google may retain information for legal, security or transaction-related reasons. Google’s handling is described in its privacy policy (https://policies.google.com/privacy).

Reviewer access

A publisher-provided reviewer code can enable Premium without a purchase or account. Only a verifier is bundled in the app; an accepted installation-local grant is encrypted with a separate Android Keystore key, excluded from notebook backups and direct sync, and removable in Premium settings. The grant survives relaunch and does not expire automatically. It is labelled as review access, not a Google Play purchase. It never unlocks protected notes, changes your device lock, or replaces vault authentication. The code is not published on this website; reviewers receive access instructions through Google Play Console.

Android permissions and device access

Android authenticates you without giving Anytime Notes biometric templates or the device PIN. Photo/document pickers grant selected-item access; a separate camera app takes selected photos. Imported images are resized and re-encoded; original gallery files are unchanged. Optional camera permission supports local QR scanning. The app requests no broad gallery, contacts, location, microphone or calendar-provider access. Notification, optional precise-alarm and restart access support reminders/widgets. Google Play dependencies add internet, network-state and billing access. Fixed sync support codes contain category/stage only, not note text or credentials.

Protection and recovery

Protected content/photos are encrypted locally; ordinary notes and the entire database are not encrypted by that feature. Some metadata, sizes and timing can remain visible. Full backup files use password-based encryption. Readable exports do not inherit protection. Protection does not defeat a compromised/rooted device, malicious keyboard/accessibility service or intentional disclosure. Keep your backup and its password: old backups retain their original password after a password change. Support cannot reset a recovery password or reconstruct a deleted notebook. An Android signing-key backup is separate from a notebook backup.

Retention and deletion

Notes remain until you delete them. Trash expires after 30 days; permanent deletion is explicit. History retains seven days free or up to 90 days Premium, with limited downgrade grace. Photo copies can remain while another note/template/history version references them. Temporary files are cleaned during operations/startup; interruption can leave files until cleanup resumes. Encrypted share access expires on new opens after 24 hours; recipients/open descriptors can retain copies. Scheduled backup rotation retains seven verified app-owned copies per selected destination. Manual backups, exports, original photos and copied files remain under your control. Uninstalling/clearing storage removes local data, not external copies or Google's records. Android automatic app backup is disabled. Secure forensic erasure is not promised.

Website and hosting

The website uses a third-party hosting provider. Visiting it sends ordinary request information, such as your IP address, browser information, requested page and request time, to the hosting infrastructure to deliver the site and support its security and operation. This information may be recorded in hosting access or error logs. Google Analytics 4 and the Google tag measure website visits and interactions only after you accept Google Analytics through Privacy choices. Until then, no Google measurement script is loaded. You can reject measurement, keep browsing and withdraw consent through Privacy choices in every footer. A first-party preference cookie records the notice version, time and choices for up to six months. Google Analytics can process page paths, referring website origins, browser and device information, approximate location derived from IP address, timestamps, interactions and cookie identifiers. We omit query strings and fragments from page locations and send only the origin of the referring website. Advertising storage, ad personalization and Google Signals are disabled. Google processes data under its own policies and may process it outside your country. Website measurement is separate from your notebook: the site does not upload or read your notes. Google's use of information is explained at https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy. Google Search Console verifies site ownership and reports search performance; it does not add visitor tracking scripts.

Website advertising and measurement: TikTok, Meta and Google

We plan to promote Anytime Notes using TikTok, Meta (including Facebook and Instagram) and Google, and to use website pixels, tags or conversion-measurement tools from these platforms. These tools are for the website, not embedded advertising or tracking tools in the Anytime Notes Android app. The app’s existing Google Play purchase and related service processing is described separately above.

When enabled, website advertising tools may use cookies, local storage, pixels and similar technologies to collect or receive page URLs, campaign and ad-click identifiers, IP addresses, browser and device information, timestamps, and website interactions or conversion events, such as clicking a link to Google Play. Depending on the platform, its configuration and your choices, this information may be associated with a platform account or other information the platform holds. It may be used to measure campaigns, attribute responses to ads, prevent fraud, build audiences, show more relevant ads or remarket to visitors. These platforms may process information outside your country under their own policies. An ad click or store-link click does not give our website access to your notebook or establish that you made a purchase.

We do not send notebook contents, protection or recovery passwords, or support correspondence to advertising platforms. Optional website advertising and measurement are separate from writing and reading notes locally. Visiting the website or accepting the Terms of Use is not, by itself, consent to optional tracking.

Google Analytics website measurement is enabled only after consent as described above. Meta, TikTok and Google advertising or remarketing tools remain disabled. Before enabling advertising tools, we will describe the tools and purposes in use and provide applicable privacy choices. Where prior consent is required, optional advertising or measurement technologies will remain off unless you consent; you will be able to reject them and later withdraw consent through the website’s privacy controls. Withdrawal affects future collection, not processing already lawfully carried out. Platform ad preferences and browser controls may provide additional choices, but may not stop every form of processing. We will retain campaign information we control only for as long as reasonably necessary for its stated purposes and legal obligations. Platform retention and rights-request procedures are governed by their policies and applicable law.

Read the policies and advertising controls relevant to your location: TikTok Privacy Policy (https://www.tiktok.com/legal/privacy-policy); Meta Privacy Policy (https://www.facebook.com/privacy/policy/); Google Privacy Policy (https://policies.google.com/privacy); Google Advertising (https://policies.google.com/technologies/ads). You can also contact info@anytimenotes.com about our advertising-related processing or your privacy rights.

Support and privacy inquiries

Good Marketeers operates under Venture Loop Inc. Venture Loop Inc. is the legal publisher of Anytime Notes. Contact info@anytimenotes.com for support or privacy inquiries. Emails you send to us may be processed by third-party email service providers and may be subject to their policies, including processing outside your country. We receive the sender address, message and any attachments you choose to send. We use them to respond to inquiries, troubleshoot problems and handle privacy requests. Do not send PINs, passwords, payment-card details or private notebooks. The in-app feedback route opens an editable draft; it does not send automatically or attach notes or diagnostics.

We retain support correspondence for as long as reasonably necessary to handle inquiries, maintain relevant support records, resolve disputes, and meet legal obligations. Retention depends on the purpose and circumstances; we delete or anonymize personal information when it is no longer required, subject to applicable law. Ask us to delete support correspondence using the same contact address; we may need to verify the request. Deleting our correspondence cannot delete copies retained by your email provider, other recipients or Google’s transaction systems. We cannot remotely access or delete the notebook stored only on your phone; use the app’s deletion controls.

Changes and contact

This policy describes the current app and website. We will update it when material changes affect data handling. Public policy: https://anytimenotes.com/privacy/. Support: https://anytimenotes.com/support/. Legal publisher: Venture Loop Inc. Good Marketeers operates under Venture Loop Inc., Ontario, Canada. Privacy contact: info@anytimenotes.com.

Terms and legal rights

Our Terms of Use address data-loss and security risks, liability limits and Ontario dispute resolution: https://anytimenotes.com/terms/. They do not waive mandatory privacy or consumer rights or reduce our statutory responsibilities for personal information.

EEA privacy rights and requests

Venture Loop Inc. is the controller for website operation, support correspondence and the processing purposes we determine. Where the GDPR applies, you may request access, correction, erasure, restriction or portability of your personal data and object to processing based on legitimate interests, subject to the applicable conditions and exceptions. You may withdraw consent at any time without affecting earlier lawful processing. Use Privacy choices to change website preferences; use Premium settings to change the app’s Google Play connection choice in versions that provide it. Contact info@anytimenotes.com. We may request proportionate information to verify identity; do not send a notebook or identification document unless we explain why it is necessary and provide a suitable route. We normally respond within one month of receiving a request. Where a lawful extension is necessary, we explain it within that month. You may complain to the data protection authority in your EEA country of residence, work or the alleged infringement, without first contacting us. Authority contacts: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en. Local notes remain under your control; we cannot retrieve, export or erase them remotely.

Purposes and legal bases where the GDPR applies

We use website request data to deliver requested pages and protect the service, relying on our legitimate interests in a functioning, secure website. We use support correspondence to take steps you request before a contract or perform our support obligations where necessary for a contract; for other inquiries and service troubleshooting we rely on our legitimate interests in responding and resolving problems. Records required by applicable law are processed to comply with those obligations. We assess necessity and balance legitimate interests against your rights; you may object. Providing an email address and enough information to answer is necessary for an email reply, but you need not submit private notes or attachments. We do not use support messages to build advertising audiences. Google Analytics website measurement relies on your consent, which you may withdraw through Privacy choices. Optional website advertising requires a separate consent choice before activation where required; no advertising is currently active. Privacy-choice storage records your requested preference and supports compliance. Purchase processing necessary to supply or restore Premium is for contract performance; any optional app processing relying on consent must remain subject to a valid choice. Google may also act as an independent controller for its services; its own policy does not replace our responsibilities. We do not use notebook content for advertising or decisions producing legal or similarly significant effects.

Recipients, locations and international transfers

Authorized publisher personnel and our hosting and email service providers may handle website request information or support correspondence for the purposes above. Payment and billing-service information is handled by Google; user-selected sharing and file providers receive content only when you give it to them. Our business is in Canada. The European Commission’s adequacy decision for Canada is limited to recipients subject to PIPEDA; it does not automatically cover every provider or onward transfer. Where a transfer is subject to GDPR transfer rules, the applicable recipient, destination and mechanism must be established, such as an applicable adequacy decision or appropriate contractual safeguards. Contact info@anytimenotes.com for information about the safeguards applicable to your data or to request a copy where available. We do not claim that every third-party service or every international transfer is covered by Canadian adequacy. Optional advertising remains disabled while its provider settings and transfer arrangements are being prepared.

Retention criteria for website and support data

We keep information we control only for as long as needed for delivery, security, troubleshooting, the inquiry, dispute handling or applicable legal duties. When assessing retention we consider whether the matter is resolved, the sensitivity of the information, any ongoing security investigation or dispute, applicable statutory periods and whether anonymized information would suffice. Hosting access/error logs and provider backups follow the provider’s configured rotation and retention; we do not promise an unverified fixed deletion period. We restrict access and delete or anonymize information we control when the purpose ends, unless continued retention is legally necessary. Privacy choices expire after at most six months; after expiry optional tools remain off until a new choice. The detailed notebook retention rules above are separate from provider logs and Google records.