● YOUR DATA
Privacy Policy
Plain language about what NPad stores, what it never sees, and the choices you have either way.
Effective: August 21, 2026 · Last updated: August 21, 2026
1Overview
NPad is a notes app designed to work fully offline, with no account required for any core feature — writing, checklists, reminders, calendar entries, and search. This policy explains what happens on the rare occasions NPad does talk to a server: when you turn on sync, subscribe to Premium, or when the app reports a crash.
We wrote this policy the way we’d want it explained to us: short sections, plain words, and no claim we can’t back up.
2Offline by Default
If you never create an account, NPad never sends your notes anywhere. All reads and writes go through a local database on your device. There is nothing to opt out of, because nothing is opted in.
✓
No account, no upload. An account is required only to turn on cloud sync or start a Premium subscription — never to use the app itself.
3What We Collect
What we collect depends entirely on what you turn on:
| If you… | We may collect |
|---|---|
| Use NPad offline, no account | Nothing leaves your device. |
| Create an account for sync | Email address, and your note content, needed to sync across devices. |
| Subscribe to Premium | Purchase and subscription status — never your full card number. |
| Experience a crash | A technical error report — not your note content. |
We do not sell your data, and we do not use your notes to serve ads, train models, or build advertising profiles.
4Sync & Encryption
When sync is on, your notes are encrypted in transit and at rest. That protects your data from interception on the network and from unauthorized access to our storage.
⚠
What this doesn’t mean: NPad is not a zero-knowledge or end-to-end encrypted product. Our server holds the encryption key, which is what allows features like email-verified password recovery to exist without permanently losing your notes. If that trade-off matters to you, offline-only use keeps everything on-device.
Locking an individual note with a master password adds a second layer on top of this — but the same trade-off applies: recovery for a signed-in account is possible precisely because the key isn’t held only by you.
5Third-Party Services
NPad relies on a small number of specialist services, each scoped to a single job:
- Supabase — hosts your account and synced note content when cloud sync is enabled.
- Sentry — receives crash and error reports so we can fix bugs. Technical, not note content.
- RevenueCat — manages Premium subscription status and purchase validation.
Each provider only receives the minimum data needed to perform its job, and none may use your data for their own purposes.
6Your Choices
- Stay fully offline. Never create an account and nothing is ever transmitted.
- Turn sync off at any time from Settings — your notes remain on-device from that point forward.
- Delete your account to remove your synced notes and email, subject to the retention window below.
- Request a copy of the data we hold about you by contacting us.
7Retention & Deletion
Deleting a note in NPad is a soft delete — it moves to Trash so a mistake on one device doesn’t destroy it everywhere else before your other devices sync. Trashed notes are permanently purged after 30 days, or immediately if you empty Trash manually.
If you delete your account, we remove your synced content and personal information within 30 days, except where we’re required to retain limited records for legal or fraud-prevention purposes.
8Children’s Privacy
NPad is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we’ll remove it.
9Changes to This Policy
If we make a material change to how we handle your data, we’ll update the date at the top of this page and, where required, notify you in the app before the change takes effect.
10Contact Us
Questions about this policy or your data are always welcome at support@appzoho.com.
