Privacy Policy
This policy explains how the Badnotes app ("Badnotes", "the app") handles your information. Badnotes runs on your device. Apart from a sign-in relay for Windows (described below), it has no servers of its own, and the developer does not collect, receive or store your notes or personal information.
Information stored on your device
Your notebooks, folders, pages, handwriting, images, imported files and settings are stored locally on your device in the app's storage. They stay there unless you choose to back them up, export them or share them.
Google sign-in and Google Drive
Signing in with Google is optional. You can use Badnotes without an account. If you sign in, Badnotes requests these permissions:
https://www.googleapis.com/auth/drive.file: create, open and update only the files and folders that Badnotes creates in your Google Drive. Badnotes cannot see or change any other files in your Drive.openid,emailandprofile: show which Google account is connected so you can tell which Drive your notes are backed up to.
Badnotes uses these permissions only to:
- back up your notebooks, folders and app settings to a Badnotes folder in your Google Drive;
- sync those notes and settings between your own devices;
- keep offloaded or deleted notebooks in that Drive folder, and download them again when you ask.
Your notes and files go directly between your device and Google's servers. They are not sent to the developer or any third party. Your Google sign-in tokens are stored only on your device.
On Windows (and in a web browser), staying signed in needs one extra step. When you sign in, and about once an hour after that, the app sends a one-time sign-in code or its sign-in token to a small service at badnotes.liewjiaen.com. That service adds the app's Google client secret and passes the request straight to Google, then returns Google's reply. It does not store, log or read the token, and it never receives your notes or files. The Android app does not use this service.
Google API Services User Data Policy
Badnotes' use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the backup and sync features described above. It is not used for advertising, not sold, not used to train AI models, and not read by humans.
What Badnotes does not do
- No ads, analytics, tracking or crash reporting services.
- No selling or sharing of personal information.
- No access to Google Drive files that Badnotes did not create.
Your choices
- Disconnect: in Badnotes, go to Settings → Cloud & Backup → Disconnect. Backup stops, and the app's access is revoked.
- Revoke access: you can also remove Badnotes' access at any time at myaccount.google.com/permissions.
- Delete backups: the files Badnotes created stay in your Google Drive after you disconnect. You can delete the Badnotes folder in Google Drive yourself.
- Delete local data: uninstalling the app, or clearing its storage, removes the notes stored on that device.
Children
Badnotes is not directed at children under 13 and does not knowingly collect personal information from them.
Changes to this policy
If this policy changes, the updated version will be posted on this page with a new "Last updated" date.
Contact
Questions about this policy: malcolmliew.je@gmail.com