Privacy Policy

1. Scope

This Privacy Policy applies to the Westie Notes mobile application available on iOS and Android. By using the app, you agree to the practices described here.

2. Overview

Westie Notes is a note-taking app designed to help you organize your thoughts, tasks, and ideas. We take your privacy seriously. In short: your notes are encrypted before being stored, and we use Firebase Authentication, Firebase Storage, Firebase Database, and RevenueCat for subscription management. Your sensitive data remains protected and encrypted.

3. Data Collection and Use

We collect and process only the minimum information necessary to provide and improve Westie Notes:

• User Authentication: We use Firebase Authentication to let you sign in securely. This may involve storing your email address or other identifiers needed for login.
• Encrypted Notes Storage: Your notes are encrypted locally before being uploaded to Firebase Storage. Firebase never has access to your unencrypted data.
• Event Sharing: We use Firebase Database to store event titles and periods for sharing between manually confirmed friends. This data is only accessible to you and your confirmed friends.
• Google Calendar Integration: With your permission, you can link a Google account to export events to your Google Calendar. We request only the https://www.googleapis.com/auth/calendar.events scope, which lets the app create, update, and delete events on your primary Google Calendar. Only the event data you choose to export (such as title, description, and start/end times) is sent from your device to Google Calendar using your own Google credentials. A mapping between your local events and the corresponding Google Calendar event IDs, together with the linked Google account email, is stored locally on your device so the app can update or remove previously exported events. You can unlink your Google account at any time from the in-app Google Calendar settings, which revokes access and clears these mappings.
• Subscription Management: We use RevenueCat to handle in-app purchases and subscriptions. RevenueCat processes purchase-related information, such as transaction receipts, subscription status, and associated identifiers from Apple App Store or Google Play, to enable premium features. We do not store or have access to your payment card information.
• No Advertising: Westie Notes does not include any third-party advertising SDKs and does not show ads or use ad networks for targeted advertising.
• Analytics: Westie Notes uses privacy-friendly analytics tools to understand app performance and usage patterns (for example, which features are used most). These analytics are used only to improve the app.

4. Local and Cloud Storage

Your notes are encrypted and stored in Firebase Storage for backup and synchronization. A local copy may remain on your device for offline use. If you uninstall the app, local data will be deleted, while encrypted backups will remain tied to your account until you delete them manually or request removal.

5. Device Permissions

Westie Notes requests only the permissions necessary for its core features:

• Camera: Used to scan QR codes for accepting friend requests. The camera is only accessed when you explicitly use the QR code scanning feature.
• Notifications: Used to send you relevant app notifications.
• Google Calendar: With your explicit consent, we can export events to your Google Calendar account.

You can manage permissions in your device settings. Westie Notes does not access your contacts, photos, or location unless explicitly required by a feature you enable.

6. Third-Party Services

We rely on trusted third-party services to operate Westie Notes:

• Firebase (Google LLC): Used for authentication, encrypted cloud storage, and event sharing database. For more information, please see Google's Privacy Policy.
• Google Calendar API: Used for exporting events to your Google Calendar with your permission. For more information, please see Google's Privacy Policy.
• RevenueCat: Used for subscription management and in-app purchase validation. For more information, please see RevenueCat's Privacy Policy.

6.1 Google User Data — Use, Sharing, Transfer, and Disclosure

Westie Notes' use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• What we access: Basic Google account profile information returned by Google Sign-In (name, email address, profile picture) and read/write access to events on your primary Google Calendar via the calendar.events scope.
• How we use it: For two purposes only: (1) Authentication — your Google account profile (name and email) is used to sign you in to Westie Notes when you choose "Sign in with Google"; and (2) Calendar export — to create, update, and delete Google Calendar events that mirror events you create inside Westie Notes, at your explicit request (through auto-export on save or bulk export from the Google Calendar screen). The two functions are independent: you can sign in with Google without enabling Calendar export, and, if you signed in via a different method, you can still link a separate Google account solely for Calendar export.
• Where it goes: Calendar event data is transmitted directly from your device to Google's Calendar API using your own OAuth credentials. We do not route it through, mirror it on, or back it up to our own servers.
• Sharing, transfer, and disclosure: We do not sell, rent, share, transfer, or otherwise disclose your Google user data to any third party, except: (a) to Google itself, as required to operate the Google Calendar export feature you requested; (b) with your explicit consent; (c) where necessary to comply with applicable law or valid legal process; or (d) as part of a merger, acquisition, or sale of assets, in which case we will notify affected users.
• Human access: We do not allow humans to read your Google user data, except (i) with your affirmative consent, (ii) when strictly necessary for security purposes (such as investigating abuse), (iii) to comply with applicable law, or (iv) when the data has been aggregated and anonymized for internal operations.
• No advertising or AI training: We do not use Google user data to serve advertisements, and we do not use it to develop, improve, or train generalized or non-personalized machine learning or AI models.
• Revoking access: You can unlink your Google account at any time from within Westie Notes (Settings → Google Calendar), or revoke the app's access directly at myaccount.google.com/permissions.

7. Billing and Payments

All purchases and subscriptions are processed securely through Apple App Store or Google Play. We do not collect or store your payment details. RevenueCat acts as an intermediary to verify purchases and manage subscription status using data provided by Apple or Google. You can manage or cancel subscriptions directly through your device’s account settings.

8. Children’s Privacy

Westie Notes is suitable for general audiences and does not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided personal information, please contact us so we can address it.

9. Your Rights

You can request deletion of your account and associated cloud data at any time. Depending on your jurisdiction (for example, under GDPR/CCPA), you may have rights to access, delete, or export your account-related data (such as email and purchase history). To exercise these rights, please contact us using the email below.

10. Security

All notes are encrypted before storage. Authentication and billing are handled via trusted third-party providers (Firebase and RevenueCat). We recommend protecting your device with a passcode and keeping your software up to date.

11. Changes to This Policy

We may update this policy to reflect app improvements or new legal requirements. If a material change occurs, we will update the date above and may provide an in-app notice.

12. Contact

If you have questions about this Privacy Policy or wish to make a request related to your data, please contact us at:

Email: unyawndeveloper@gmail.com