Introduction. This privacy policy applies to the Private Notes (Nostr) application (hereinafter referred to as the "Application") for mobile devices, created by Alekseii Popkov (hereinafter referred to as the "Service Provider"). The Application is provided as a free service and is intended for use "AS IS".
The Service Provider does not collect, store, or share any of the content you create in the Application (your notes, private keys, or PIN).
Private Notes (Nostr) uses the Nostr protocol — a decentralized network of independent servers called "relays." Your private key (nsec) is generated on your device and stored exclusively in secure hardware-backed storage (Keychain on iOS, Keystore on Android). It never leaves your device and is never sent to the Service Provider or any third party.
Your notes are encrypted locally and then published to Nostr relays that you select in the Application settings.
Optional PIN: If you choose to set a PIN for additional security, it is never stored on disk and exists only in memory while the Application is open.
Your public key (npub) is visible to relays and other Nostr users when you publish notes. This is a public identifier, similar to a username. The Service Provider does not collect your npub, IP address, device information, or usage statistics related to your note-taking activity.
Unlike your notes, the Application does display advertising, served through Google AdMob. To operate, AdMob and its advertising partners may collect and process the following categories of data from your device, independently of the Service Provider and independently of your notes:
This data is processed by Google and its certified ad technology partners for the purposes of showing personalised or non-personalised ads, ad measurement, and fraud prevention, in accordance with Google's own privacy policy and, where applicable, with your consent collected via the in-app consent message. A list of ad technology partners is available in that consent message and at https://support.google.com/admob/answer/9012903.
The Application does not integrate any analytics, crash reporting, or tracking SDKs other than those required for AdMob advertising described above.
For users in the European Economic Area, the UK, and Switzerland, advertising-related data described above is processed on the basis of your consent, collected through the in-app consent message before any personalised advertising or use of non-essential identifiers occurs, or on the basis of legitimate interest for certain limited purposes, as disclosed in that message. You can withdraw or change your consent at any time from the app's privacy/consent settings.
If you are located in the EEA, UK, or Switzerland, you have the right to: access, correct, or request deletion of personal data processed about you by advertising partners; object to or restrict certain processing; request data portability; and withdraw consent at any time. Because the Service Provider itself does not collect or store personal data, these requests relating to advertising data are generally handled directly with Google/AdMob via https://myaccount.google.com or the consent message's "Manage options" control. You also have the right to lodge a complaint with your local data protection supervisory authority.
Other than the Google AdMob advertising SDK described above, the Application does not integrate any third-party analytics, crash reporting, or tracking tools. The Service Provider does not share any note content or Nostr key data with third parties because no such data is collected.
Nostr relays (which you choose independently) may process your encrypted notes according to their own policies. The Service Provider is not responsible for the privacy practices of these relays or of Google's advertising partners.
You can stop all use of the Application simply by uninstalling it. Use the standard uninstall process available on your mobile device or via the app marketplace. You can also manage or withdraw advertising consent at any time via the in-app consent/privacy settings.
Your notes and nsec remain solely on your device and the relays you selected.
To permanently delete your data: uninstall the Application and, if desired, send deletion requests to your chosen relays.
The Service Provider cannot delete your notes because the Service Provider does not possess them. Advertising data held by Google/AdMob is retained and deleted according to Google's own privacy policy.
The Application is not directed at children under the age of 13, and advertising is not configured to target children. The Service Provider does not knowingly collect any information from children. If you believe a child has provided personally identifiable information, contact the Service Provider at alexey.yu.popkov@gmail.com.
The Service Provider is committed to protecting your privacy through transparency and minimal data handling. Your notes' security relies on:
However, you are solely responsible for backing up your nsec. If lost, your notes cannot be recovered by anyone, including the Service Provider.
This Privacy Policy may be updated from time to time. The Service Provider will notify you of any changes by updating this page with the new policy. Continued use of the Application is deemed approval of the updated policy.
By using the Application, you consent to the processing of your information as described in this Privacy Policy, including advertising-related processing by Google AdMob and its partners as described above and/or confirmed via the in-app consent message.
If you have any questions regarding privacy while using the Application, please contact the Service Provider at: