Effective 26 August 2026

Privacy Policy

This policy explains what SonaNote does with your information, who we are, and what rights you have. It is also published at https://sonanote.app/privacy.

In short

• As the app works today, your notes, pictures, flashcards and study history are kept in its storage on your device, and we do not receive them.
• If that changes — for example if a feature starts processing your notes on a server — we will update this policy and tell you in the app before it takes effect.
• We do not sell or share your personal data, and we do not use it for advertising.
• There is no account to create, so there is no profile for us to build.
• Android's own backup can copy the app's data to your Google account. You control that in Android's settings.
• If you buy a subscription, purchase records are processed by Google Play and our subscription provider.

Who is responsible for your data

MB Daivina (Mažoji bendrija Daivina), established in the Republic of Lithuania, is the data controller for the limited personal data described here.

MB Daivina (Mažoji bendrija Daivina)
Lauko g. 6, Kvetkai, LT-41212, Lithuania

For any privacy question or request, write to support@daivina.net. We have not appointed a data protection officer, as we are not required to.

Your notes, and how they are processed

Your notes and their pictures, topics, flashcards, review schedules, study history, teach-back attempts and all your settings are held in SonaNote's private storage on your phone. In the current version they are not transmitted to us, and we do not hold a copy.

Distilling a note into a summary, key terms, flashcards, a quiz and a teach-back grade, and reading text out of a photograph, are done in the current version by components on the phone — Gemini Nano through Android's AICore where the device supports it, SonaNote's own text analysis otherwise, and a bundled text recogniser for pictures.

This describes how SonaNote works today rather than a commitment about how it will always work. We may add features that process your notes elsewhere — including with a hosted model run by a provider on our behalf — because that can produce better study material than a phone can. If we do, we will say so in this policy, update our Google Play data disclosure, and tell you in the app before the feature is used on your notes.

What we process, why, and on what legal basis

We keep this deliberately small. Where the GDPR applies, our legal basis is given for each item.

• Purchase and subscription records — if you buy a subscription: a purchase token issued by Google Play, the product bought, its status and dates, the country Google reports, and a random identifier for your installation. Used to give you what you paid for and to restore it on a new device. Basis: performance of our contract with you.
• Correspondence — if you write to us: your email address, your message, and anything you choose to include. A feedback report also carries the app version, your Android version and your device model, shown to you before it is sent. Used to answer you and to fix what you describe. Basis: our legitimate interest in supporting and improving the app, and performance of our contract where your message concerns a purchase.
• Reports about generated content: what you send us when reporting output you consider inappropriate. Used to review and correct the feature. Basis: our legitimate interest in keeping the app safe, and compliance with app-store requirements.

We do not use your data for advertising, we do not sell or share it for cross-context behavioural advertising, and we do not make decisions about you by automated means that produce legal or similarly significant effects.

Who else is involved

SonaNote relies on a small number of providers, which act as our processors or as independent controllers of their own services:

• Google — as the operator of Google Play (distribution, payments and subscription management), of Android's AICore and ML Kit components used for on-device processing, and of Android Backup. Google's own privacy policy governs what it does as a controller.
• Our subscription management provider, which records the purchase data listed above so that a subscription you paid for survives a reinstall or a new device. It receives no notes and no note content.
• Our email provider, for messages you send to support@daivina.net.

We do not give your personal data to anyone else, except where we must to comply with the law, to establish or defend legal claims, or in connection with a merger or sale of the business — in which case we would tell you beforehand and your rights would carry over.

Where data can leave your device

Each of these is something you or your phone's own settings start:

• Android Backup. SonaNote permits Android's system backup, which copies its database and pictures to your own Google account so a new phone can restore them. This is Google's service under Google's policy, and your note content is included. You can switch it off for this app in Android's backup settings.
• Backups you save. "Back up everything" writes a single file wherever you choose to put it — Drive, Dropbox, a folder on the phone. From that point the destination's own policy applies.
• Notes you share or export. Sharing a note or a Markdown export passes the text to the app you pick from the share sheet.
• Feedback you send. The form opens your own mail app with the message ready; you press send, so you see exactly what goes.
• Dictation. SonaNote requests on-device speech recognition and uses it where your phone provides it. Where it does not, Android's recogniser may send the audio to Google for transcription under Google's policy. SonaNote does not record audio to a file and does not send audio to us.
• Model download. When you choose to download the on-device Gemini Nano model, Android fetches it from Google. Your notes are not part of that request.

Permissions

• Microphone — only while you are dictating, and only after you grant it. Revoke it at any time in Android's settings.
• Camera — only when you take a picture for a note. Pictures are saved into the app's private storage.
• Photos you select — only the individual images you pick, through Android's photo picker.

The installed package also holds the internet and network-state permissions, which the Google components described above require.

International transfers

Our providers may process data outside the European Economic Area, including in the United States. Where they do, transfers are covered by an adequacy decision of the European Commission or by Standard Contractual Clauses together with appropriate additional safeguards. Write to support@daivina.net for details of the safeguards that apply.

How long we keep things

• Notes and study data: on your device, for as long as you keep them. Deleting a note deletes it; removing the app removes them all from the phone.
• Purchase records: for the life of the subscription and afterwards for as long as accounting and tax law requires, which in Lithuania is generally ten years.
• Correspondence: normally up to 24 months after the matter is closed, and longer only where we need it to establish or defend a legal claim.

Security

Your notes are held in the app's private storage, which Android isolates from other apps, and on modern Android that storage is encrypted at rest by the operating system. Data in transit to our providers travels over encrypted connections. Access to the little we hold is limited to those who need it. No system is perfectly secure, and a device you have rooted, lost or shared is outside what any app can protect.

Your rights

Because your notes are on your device, you exercise most of these directly: you can read, edit, export and delete every note in the app without asking us. For personal data we hold — correspondence, or a purchase record tied to your installation — you have the right to:

• ask for access to it, and for a copy
• have inaccurate data corrected, and incomplete data completed
• have it erased, where the law allows
• restrict how we process it, or object to processing based on legitimate interests
• receive it in a portable, machine-readable form
• withdraw consent at any time, where processing rests on consent, without affecting what was done before

Write to support@daivina.net to exercise any of them. We answer within one month, and we will tell you if we need longer or cannot comply — for example where a payment record must be kept for tax purposes.

There is no account to delete, because SonaNote does not create one. If you want everything gone: delete your notes or remove the app from the phone, remove any backup held in your Google account, and write to us to have any correspondence erased.

If you believe we have handled your data wrongly you may complain to your local data protection authority. Ours is the State Data Protection Inspectorate of the Republic of Lithuania (Valstybinė duomenų apsaugos inspekcija), vdai.lrv.lt. We would appreciate the chance to put it right first.

If you are in the United States

We do not sell your personal information and we do not share it for cross-context behavioural advertising, as those terms are used in California and comparable state laws. Residents of those states have rights to know, delete, correct and to non-discrimination; write to support@daivina.net and we will honour them.

Children

SonaNote is a general-audience study app. It is not directed at children under 13, and it is not listed as a children's app. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, write to support@daivina.net and we will delete it.

Automatically generated content

SonaNote generates study material from your notes using a model on your device. Generated text can be inaccurate or, rarely, inappropriate. You can report any such output through Settings → Feedback or to support@daivina.net, and we review every report.

Changes to this policy

If SonaNote begins doing something this policy does not describe, the policy changes in the same release and the date at the top changes with it. Where a change is material we will bring it to your attention in the app. The current version is always at https://sonanote.app/privacy.

Contact

Privacy questions, requests and complaints: support@daivina.net