NOTES SYNC FOR ANDROID

Privacy Policy

Updated 17 October 2026

Notes Sync is a standalone Android notes app that connects directly to the Gmail Notes mailbox used by Apple Notes. Each user chooses their own Google accounts after installation. No user email is prebound to the APK. Multiple profiles have separate notes and synchronization state.

Google account and Gmail access

Browser sign-in opens Google's own page in your browser, where Google handles your account password and any additional checks. After you grant access, you return to Notes Sync; this flow does not add the account to Android. It uses authorization code with PKCE and a single-use state. Google Play services sign-in remains available for accounts on your phone. Both methods request your verified email address to identify the selected profile. In the email-and-password option, you enter a password in Notes Sync, which sends it directly to Gmail over TLS for IMAP authentication. Gmail may reject an ordinary account password and require a Google-generated App Password or Google sign-in. IMAP credentials are saved only after the connection and selected folder have been checked successfully. Google sign-in requests https://mail.google.com/ because Google's consumer IMAP service requires this scope. This permission covers the mailbox, but the implemented synchronization operates on the selected Notes folder and targeted moves to Trash.

The app reads supported note messages, uploads notes you create or edit, and moves replaced or explicitly deleted note messages to Trash. It does not send email through SMTP or permanently expunge mailbox messages. Existing notes are imported before automatic upload is enabled. Attachments and unsupported formatting are read-only.

Storage and security

Notes, titles, bodies, mailbox identifiers, conflicts and queued changes are stored in app-private Android Room storage. This notes database is not separately encrypted by the app. Profile settings, saved IMAP passwords, browser OAuth access and refresh tokens, and the pending browser request containing the PKCE verifier are encrypted with AES-GCM using Android Keystore. Browser tokens are isolated by account and allow background synchronization without repeated password entry. The pending request is single-use and expires after ten minutes. The alternative Google Play services flow does not persist its access tokens in the app. The password field is not restored after the sign-in screen is recreated, and credentials are not included in diagnostic reports. Android cloud backup and device transfer are disabled.

Network connections go directly from your phone to Google using TLS and server identity checks; no developer-operated synchronization server receives your notes.

Use and sharing

Gmail data is used only to provide the user-requested notes synchronization and profile features. Notes changes are sent to the Google account connected to that profile. We do not sell Gmail data, use it for advertising, or use it to train general-purpose AI models. There is no advertising or third-party analytics SDK in the Android app.

Notes Sync's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnect, retention and deletion

Sign out removes the selected connection profile and deletes stored browser tokens after the last browser profile for that email is removed. Cached notes and unsynced changes remain on the phone. Ordinary sign out does not revoke your Google authorization, so it does not reset consent for your next sign-in or affect other devices. With the local credentials removed, this disconnected profile no longer synchronizes. You can separately revoke Google authorization at any time in your Google Account.

Clearing the app's Android storage or uninstalling it removes local data, including unsynced changes; this does not instruct the app to erase Gmail notes. Deleting an individual synchronized note in the app moves its remote copy to Gmail Trash after the initial-import safeguards and may affect Apple Notes on the iPhone. The app does not permanently empty Gmail Trash.

Your choices and support

You may use local notes without connecting Google and disconnect accounts individually. You can export the selected account or local notes to a ZIP archive using Android's file picker. The archive includes HTML, text and available downloaded attachments, excludes Trash and credentials, and is saved to a destination you select. You control any sharing of that archive. Automatic database restore is not provided; keep an independent copy of important notes.

For support, use the support tracker or the developer support email displayed on Google's consent screen. Never send passwords, access tokens, or private note contents.

Website hosting

This information website is hosted by GitHub Pages. GitHub may process visitor information under its Privacy Statement. This site has no sign-in form, analytics scripts, or note-upload feature. Website hosting is separate from the Android app's local notes storage and direct Google connection.

Policy changes will be reflected on this page.