NotePrivacy Policy
1. Scope and Operation
NoteKar is an open-source productivity, time-logging, and reflection utility maintained by independent developer Dheeraz (@dheeraz101) as part of the YABP (Yet Another Boring Project) initiative. This Privacy Policy covers:
- NoteKar Android Application (native mobile client distributed via GitHub Releases).
- NoteKar Companion PWA (progressive web app running in modern browsers).
- NoteKar Public Website (hosted on Vercel at
notekarapp.vercel.app).
NoteKar does not require user accounts, passwords, or personal identity profiles to use.
2. Data Stored Locally on Your Device
NoteKar stores all personal logs, check-ins, and configurations strictly on-device:
- Moments, Timestamps, Notes & Tags: On Android, records are saved directly in a local Isar database on app storage. In the Web PWA, records are stored in browser IndexedDB (using Dexie.js).
- User Preferences & Configs: Theme, accent swatches, modes, custom categories, clock typography, Life Audit baseline allocations, and sobriety parameters are stored in Android SharedPreferences or browser LocalStorage.
- Local Application Lock: The in-app PIN/biometric lock and privacy background blur protect the app interface from observation on-device; they are UI privacy controls and should not be confused with hardware-backed database filesystem encryption.
3. What NoteKar Never Transmits
NoteKar maintains zero cloud user database servers and zero background sync pipelines. Your moments, notes, category names, tags, sobriety records, and Life Audit horizon inputs are never uploaded to any remote server or third-party service by NoteKar.
4. Network and Service Provider Disclosures
While core logging is offline-first, certain optional features make bounded outbound HTTP requests:
| Surface | Destination / Host | Trigger & Purpose | User Data Transmitted? |
|---|---|---|---|
| Android App | raw.githubusercontent.com |
Fetches static public release metadata (version.json) and bulletin campaigns (notification.json). |
None. Sends only standard HTTP client headers (User-Agent). |
| Android App | api.github.com |
Checks newest GitHub release tags and commits for changelog display in Update Center. | None. Public repository read queries only. |
| Android App | github.com/releases/download |
User-initiated download of release APK when an update is chosen. | None. Standard file download request. |
| Companion PWA | fonts.googleapis.com & fonts.gstatic.com |
PWA entry font loading (Inter typeface). Falls back to system fonts offline. | Standard browser IP and font request headers to Google. |
| Companion PWA | unpkg.com |
Loads Dexie library with bundled local fallback. | Standard CDN script fetch. |
| Website | notekarapp.vercel.app |
Public static website delivery and asset hosting via Vercel. | Standard web server access logs processed by Vercel. |
External links (such as viewing the VirusTotal report, opening the GitHub issues page, or visiting support links) leave NoteKar and are governed by the destination provider's terms and privacy policies.
5. Local Diagnostics & Device Information
The Diagnostics screen in Settings displays local-only information about device capabilities (such as blur/translucency readiness, battery optimization status, and recent local network request check results). These metrics are measured on-device for troubleshooting and are never transmitted to an external logging service.
6. Android System Permissions
NoteKar requests permissions strictly needed for requested capabilities:
- Notifications (
POST_NOTIFICATIONS): Displays persistent session controls, hourly mindfulness prompts, and update notices. - Exact Alarms (
SCHEDULE_EXACT_ALARM): Delivers exact mindfulness prompts and midnight maintenance routines on modern Android versions. - Boot Completed (
RECEIVE_BOOT_COMPLETED): Re-registers active reminders and widget states when your device restarts. - Usage Access (Optional): Allows Digital Wellbeing mode detection when enabled by the user; usage stats remain local.
- System Alert Window (Optional): Enables the floating chronometer pill overlay across other apps.
Android controls alarm firing, battery restrictions, and notification delivery; delivery timing may vary depending on device manufacturer settings.
7. Export, Retention and Deletion
- Data Export: Export your timestamp entries anytime in standard JSON or CSV formats. The resulting file is saved locally to your selected storage location.
- Trash Bin & Deletion: Deleted moments move to the in-app Trash Bin, which automatically purges entries older than 30 days during midnight maintenance, or can be permanently wiped immediately with "Empty Trash".
- Complete Reset: "Reset All Data" in Settings permanently wipes local database tables and preferences. Because there is no remote account or cloud copy, wiped data cannot be recovered by NoteKar.
- OS System Backups: If Android OS Auto Backup (Google Drive) is enabled on your device, your app data may be included in your personal encrypted OS backup according to Android system rules.
8. Contact and Vulnerability Inquiries
For questions or privacy concerns regarding NoteKar:
- Email: yabp.support@gmail.com
- Maintainer: Dheeraz (@dheeraz101)
- Source Code Repository: github.com/dheeraz101/Notekar-Android