Privacy Policy

Effective date: November 6, 2026

Bản tiếng Anh dưới đây là bản chính thức. Tóm tắt: ghi chú của bạn chỉ nằm trên thiết bị (hoặc Google Drive của chính bạn nếu bật sao lưu). Chúng tôi không có máy chủ lưu ghi chú và không bao giờ đọc, bán hay chia sẻ nội dung ghi chú. App dùng Firebase để thống kê ẩn danh và báo lỗi, AdMob / Unity Ads để hiển thị quảng cáo ở bản miễn phí.

This Privacy Policy explains how Pastel Notes: Color Notes, PDF (the "App"; Android package com.pastelnotes.app), developed by Fighttech ("we", "us", "our"), handles information when you use the App. By using the App you agree to this policy.

In short: your notes, checklists, images, categories and settings are stored on your device. We do not run servers that store your notes and we never receive, read, sell or share their content. Optional backups go to your own Google Drive account. We use Firebase for anonymous analytics and crash reports, and Google AdMob / Unity Ads to show ads in the free version.

1. Information stored on your device

Everything you create in the App — note titles and text, checklists, images you attach, imported PDF pages, colors, categories, reminders and settings — is saved locally in the App's private storage. Your lock PIN is stored on your device only, in hashed form. Fingerprint / biometric unlock is handled entirely by Android; the App never receives your biometric data. We do not collect, transmit or have access to this content.

2. Optional backup to your own Google Drive

If you enable backup, you sign in with Google and grant the App access to the hidden, app-specific appDataFolder of your Google Drive. Backup files are stored in your own Google account and we cannot access them. The App does not read or modify any other files in your Drive. The account email shown in the backup screen is used only on your device and is not sent to us. You can also export a backup file to a location you choose; you are responsible for where you keep or share that file.

3. Information collected automatically

We use the following third-party services. None of them receive the content of your notes.

Service	Purpose	Data
Firebase Analytics (Google)	Understand feature usage in aggregate	App-instance ID, anonymous usage events (e.g. "note created", "PDF exported" — never the text), device model, OS and app version, country/language, session data
Firebase Crashlytics (Google)	Detect and fix crashes	Crash stack traces, device state at crash time, installation UUID, OS and app version
Firebase Remote Config (Google)	Adjust feature settings without an update	App-instance ID, app version, country/language
Google AdMob	Show ads in the free version	Advertising ID, IP address, device information, ad interactions
Unity Ads	Show ads in the free version	Advertising ID, IP address, device information, ad interactions
Google Play Billing	Process Pro purchases and subscriptions	Purchase token, product ID, purchase status. Payment details are handled by Google and never shared with us.

See the Firebase, Google Ads and Unity privacy policies. The App also fetches an on/off configuration for ad formats from our server; this request contains only the app package name and version.

4. Advertising and your choices

In the EEA, UK, Switzerland and other regions where required, we use Google's User Messaging Platform to ask for your consent before personalized ads are shown; you can change your choice in the App's settings. You can reset or delete your advertising ID in Android Settings → Privacy → Ads. Pro users do not see ads.

5. Permissions

Photos / media: only to attach images or import PDF files you choose.
Notifications and alarms: to deliver reminders you set on notes.
Biometrics: to unlock the App or locked notes, handled by Android.
Internet: for optional Drive backup, ads, analytics, crash reports and purchases. Writing notes works fully offline.

6. How we use information

We use the limited data in section 3 to operate, maintain and improve the App, fix crashes, measure feature usage in aggregate, show ads in the free version and verify purchases. We do not sell personal information and we do not use the content of your notes for any purpose.

7. Legal bases (EEA/UK users)

We rely on your consent for personalized advertising and, where required, analytics; on our legitimate interest in keeping the App secure and stable for crash reporting; and on performance of a contract for processing purchases.

8. Data retention

Notes stay on your device (and your own backup) until you delete them. Deleted notes stay in the in-app trash for 30 days, then are removed. Firebase Analytics data is retained for up to 14 months and Crashlytics data for up to 90 days. Ad partners' retention is governed by their own policies.

9. Children's privacy

The App is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

10. Security

Your notes are protected by the optional App lock and by your device's own security; Drive backups are protected by your Google account. No method of storage is 100% secure.

11. Your rights and data deletion

You control your notes directly: delete notes in the App, empty the trash, or uninstall the App to remove all local data. Delete Drive backups from the App's backup screen or from Google Drive → Settings → Manage apps. Depending on where you live (e.g. GDPR, UK GDPR, CCPA/CPRA) you may have rights to access, correct, delete or object to processing of personal data — email us and we will help. See also our data deletion page.

12. International transfers

Our service providers (Google, Unity) may process data in other countries under appropriate safeguards such as Standard Contractual Clauses.

13. Changes

We may update this policy. We will post the new version here and update the effective date.

14. Contact

Fighttech — Email: trunghieu4121993@gmail.com