Privacy Policy

Welcome to PurpleNotes

This Privacy Policy describes how flipcodex("we", "us", or "our") collects, uses, and protects your information when you use the PurpleNotesmobile application (the "App"), available on Android via the Google Play Store.

PurpleNotes is a multi-feature productivity app that includes notes, tasks, and secure encrypted vault conversations (LockNKey). By using PurpleNotes, you agree to the practices described in this Privacy Policy.

1. Information We Collect

We collect only the information necessary to provide and improve the App.

a. Account Information

• Name, email address, and profile photo (via Google OAuth sign-in)
• Username (chosen by you during registration)
• Referral code and referral activity

b. Notes and Tasks

• Note titles, content, color labels, and pinned status
• Images attached to notes
• Task titles and completion status
• Private note password hashes (we do not store plaintext passwords)

c. Vault Conversations (LockNKey)

• End-to-end encrypted messages, images, and voice notes
• Vault metadata (title, expiry, recovery question)
• We cannot read your encrypted messages — only you hold the decryption key

d. Technical and Usage Data

• Device type, operating system, and app version
• Ad interactions (via Google AdMob)
• In-App Purchase receipts (processed by Google Play Billing)

We do not collect location data, contacts, or access your camera or microphone (except for selecting images from your gallery or recording voice notes within vaults).

2. How We Use Your Information

• Provide, maintain, and improve the PurpleNotes App
• Authenticate your identity via Google sign-in
• Store and sync your notes, tasks, and encrypted vault conversations
• Process in-app purchases and subscriptions
• Serve advertisements (free tier only) and manage ad-free periods
• Detect and prevent fraud, abuse, and security issues

3. Vaults, Keys, and Encryption

PurpleNotes uses a key-based access system for vault conversations. Each vault is protected by a secret key known only to you.

All messages, images, and voice notes within vaults are encrypted on your device using AES-256-GCM encryption with PBKDF2key derivation before being sent to our servers. We never have access to your vault's plaintext decryption key.

Users are responsible for protecting their vault keys. Anyone who has the correct key may access the related vault. If you lose your key, you may use the recovery question to regain access.

4. Messages and Content

Your notes, tasks, and vault conversations belong to you. This content is stored only to provide the PurpleNotes experience.

We do not sell your notes, messages, vault data, or personal information.

5. Third-Party Services

PurpleNotes uses the following third-party services that may collect information:

• Google OAuth — for authentication and sign-in
• Google AdMob — to serve advertisements (free tier). AdMob may collect device identifiers and ad interaction data.
• Supabase — backend infrastructure for database, authentication, file storage, and real-time features
• LiveKit — for real-time voice calling within vault conversations
• Google Play Billing — to process in-app purchases and subscriptions

Each third-party service operates under its own privacy policy. We encourage you to review their respective policies.

6. Data Sharing and Disclosure

flipcodex does not sell your personal data to third parties.

We may share information only in the following circumstances:

• When required by law, legal process, or government request
• To protect the security, rights, or safety of PurpleNotes, its users, or the public
• In connection with a merger, acquisition, or sale of assets (we will notify you before your data is transferred)

7. Notifications

PurpleNotes notifications are designed to avoid exposing sensitive information such as note content, vault names, message content, or user identities. Notification previews are intentionally limited.

8. Data Security

We implement industry-standard security measures to protect your data, including encrypted storage, row-level security policies, and secure file access with time-limited signed URLs.

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we take reasonable steps to protect your information.

9. Children's Privacy

PurpleNotes is not intended for children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

10. Your Rights

You have the right to access, update, or delete your personal data. You can:

• Edit your profile and username within the app
• Delete individual notes, tasks, or vault conversations at any time
• Request full account deletion by contacting us

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page. Continued use of PurpleNotes after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or how flipcodex handles your data, please contact us at:

Developer: flipcodex
App: PurpleNotes
Website: https://locknkey.xyz
Email: support@locknkey.xyz