Privacy policy — NoteSpark

What NoteSpark stores

Your notes: the title, text, format, whether they are pinned, and the dates they were created and edited, and your scratchpad. They are kept in a database on your device, one for each profile. On a computer: The database is in NoteSpark's folder (on Linux, ~/.config/notespark-desktop).
A search index: for search by meaning, each note is turned into a list of numbers by a small model that is part of the app and runs on your device. The index is kept in the same database as your notes.
If you add an image to a note (optional), it is copied into NoteSpark's own storage on your device and stored encrypted, like a document, so it keeps showing if the original is moved. On Android: It also keeps showing if the phone clears its cache. It isn't uploaded. If you turn on sync, the image goes with its note to the devices you paired. A copy is deleted once no note uses it.
If you attach documents to a note (optional, up to 32 MB each), they are copied into NoteSpark's own storage and stored encrypted. They are not uploaded anywhere. If you turn on sync, a document goes with its note to the devices you paired. A copy is deleted once no note uses it.
Your profile names, which profile is open, your theme choice, whether you've finished the welcome screens, and a list of your last 20 imports and exports. These are also kept on your device, On a computer: In the same folder, along with your backup settings if you use automatic backups.
Profile PINs (optional): only a scrambled form of each PIN (a salted hash) is kept. The PIN itself isn't stored, so it can't be recovered if you forget it. A profile with a PIN also has its notes encrypted on your device.
On Android: The hash, and the key that encrypts a protected profile, are kept in Android's secure storage.
On a computer: The key for a protected profile is kept by your system's keyring (such as KWallet or GNOME Keyring). If no keyring is available, NoteSpark won't create a protected profile.
On Android: If you set a PIN on a profile, a copy of its hash, and of the profile's key wrapped with that PIN, is also kept in the app's ordinary storage so a restored phone can unlock the profile. Android's backup can include it, so someone who can read a backup could try every 4-digit PIN.
On a computer: If you set a PIN on a profile, a copy of its hash, and of the profile's key wrapped with that PIN, is also kept in NoteSpark's settings file in the same folder, so a restored folder can unlock the profile. Someone who can read that folder, or a backup of it, could try every 4-digit PIN.
If you pair a device for sync (optional), NoteSpark also keeps that device's name and public key, plus its own sync key. No note text is stored for this. On Android: It also keeps the other device's addresses, and its sync key is in Android's secure storage. On a computer: The sync key is kept by your system's keyring.
A deleted profile stays on your device for 30 days so you can restore it, then it and its notes are erased.

None of this is sent to the developer or anyone else.

Nothing leaves your device

NoteSpark stays offline by design. It makes no requests to the internet of its own: no analytics, no crash reporting and no update checks. On Android: updates come only from where you installed the app: the store, or a new APK that you download yourself. On a computer: new versions come only as a new installer that you download yourself. Sync is off until you turn it on, and then nothing leaves your own network (see Sync between your devices).

Web images are off by default. If you turn on Show web images in Settings, a picture that a note links from a web address is requested from that website the first time you view the note, so that website sees your connection. Turn it off and no website is contacted. On Android: The picture is then kept on your phone so it shows offline, even if the website removes it, and a saved copy is deleted once no note uses it and it hasn't been viewed for 30 days.
When you export notes, or save a backup or a PDF, the file goes only where you choose. On Android: When you share notes, the file goes only where you choose in the share sheet.
Automatic backups, if you turn them on, are saved only to the folder you pick. Profiles with a PIN are left out unless you include them; backup files can be read without the PIN.
On a computer: If you choose a Markdown folder for sync (optional), NoteSpark keeps a Markdown file for every note of the profiles that sync in that folder. Protected profiles are not mirrored.
On a computer: When you click a link in a note, it opens in your own browser, which then contacts that website. NoteSpark doesn't.
On Android: If Android's own backup is turned on in your phone's settings, Android may copy NoteSpark's data, including your notes, to your Google account, so it can be restored on a new phone. This is a feature of Android that you control in your phone's settings; NoteSpark doesn't send anything itself.

Sync between your devices (optional)

Sync is off for every profile until you turn it on in Settings under Sync and pair two devices.

When it is on, your devices talk only to the devices you paired, at their addresses on your own network: your home or office Wi-Fi, a hotspot, USB tethering or a VPN. Everything is encrypted so nobody on the network can read it, and NoteSpark never connects to a public internet address. Nothing leaves your own network.
On a computer: The computer listens on private network addresses only, for the devices you paired, and talks to them directly.
There is no account and no server of ours. A device you did not pair gets no answer.
On Android: The phone's sync key stays in Android's secure storage and is left out of Android backups, so a restored phone has to pair again. The phone ignores anything that is not from a device it paired with.
On a computer: By default, a device you paired can add a profile on the computer, and the new profile starts without a PIN. To let devices sync only into profiles you already have there, turn off Accept new profiles from devices in Settings under Sync.
A sync file, if you export one, is saved or shared only where you choose and is locked with a passphrase that NoteSpark never stores. NoteSpark sends it nowhere; you move it yourself. Without the passphrase the notes in it cannot be read.
A PIN is never synced. It protects only the device where you set it: the notes of a protected profile reach the other device as ordinary notes, and whether the profile there has a PIN is up to you.
Turn sync off for a profile, or forget or remove a device, at any time. Notes already on a device stay on it.

The web view on a computer (optional)

The web view is off until you turn it on, and off again when you stop it or quit NoteSpark. It lets a browser on another device use your notes while NoteSpark runs on the computer.

By default it answers only that computer and VPN addresses such as Tailscale or WireGuard. A separate switch in Settings under Sync, Web view on Wi-Fi, also lets devices on your home or office network in. It is off unless you turn it on, and NoteSpark warns you each time. Requests from public internet addresses are always refused.
Opening it needs a link with a random code that changes every time you turn it on. Anyone who has the link can read and edit your notes, so share it only with yourself.
Through a VPN or Tailscale the connection is encrypted by the VPN. With the Wi-Fi switch on it is not encrypted (plain HTTP), so other people on that network could read what is sent.
A profile with a PIN is opened and locked on the computer only. The web view works with the profile that is open there.

Permissions

On Android: Notifications (optional): to tell you things like an export finishing, and to remind you of tasks on their due date. These notifications are created and scheduled on your device; NoteSpark doesn't use push notifications. Reminders for profiles with a PIN don't show the task text.
On Android: Photos (optional): only the images you pick when adding an image to a note.
On Android: Files (optional): only the backup or note files you pick when importing notes, and the folder you pick for automatic backups.
On Android: Fingerprint (optional): only if you turn on fingerprint unlock for a profile. Android checks your fingerprint; NoteSpark never sees or stores it.
On Android: Network access: to show images from web addresses that you add to notes (only if you turn on Show web images), and, if you turn on sync, to talk to your own devices on your own network. NoteSpark also allows plain http web addresses for those images, so use https addresses when you can.
On Android: Camera (optional): only while you scan a pairing code on the Sync screen. NoteSpark asks when you tap Scan, records and saves nothing, and you can paste the code instead.
On Android: Running in the background (optional): only while sync is on, so your devices stay up to date when NoteSpark is closed. Android shows a notification while it runs. If you say no, sync works while NoteSpark is open.
On a computer: Notifications (optional): to remind you of tasks on their due date. They are created on the computer; NoteSpark uses no push notifications. Reminders for profiles with a PIN don't show the task text.
On a computer: Files and clipboard (optional): only the files you pick when importing, the folders you pick for backups, the Markdown folder and exports, and the clipboard only when you choose Save clipboard from the tray icon.
On a computer: Keyring (optional): your system's keyring (such as KWallet or GNOME Keyring) keeps the keys NoteSpark needs for protected profiles and sync. Without one, NoteSpark won't create a protected profile or turn sync on.
On a computer: Network access: only for sync on your own network, for the web view if you turn it on, and for web images if you turn on Show web images. NoteSpark never listens on a public address.

Your control over your data

Move a note to the bin from its menu, or every note from Settings. Notes in the bin are erased for good 30 days later, or straight away if you delete them forever or empty the bin in Settings, under Bin.
Export a copy of your notes at any time in Settings, under Import and export.
On Android: Uninstalling NoteSpark deletes all of its data from your device. The developer has no copy, so deleted notes can't be recovered unless you exported them or Android's backup restores them.
On a computer: Removing NoteSpark's folder erases everything. The developer has no copy, so deleted notes can't be recovered unless you exported them.

Children

NoteSpark doesn't collect personal information from anyone, including children under 13.

Changes to this policy

If this policy changes, the new version will appear here and on notespark.lusansapkota.com.np with a new effective date.

Contact

Questions about privacy: [email protected]