Noteday Privacy Policy

1. Scope and controller

This Policy applies to the Noteday iOS app, its related widgets, the feedback service, and this policy page. The service provider and data controller is the provider identified on Noteday’s App Store product page (listed as “铧 杨” on the date of this Policy and referred to below as the “Developer,” “we,” or “us”).

Privacy questions, rights requests, and complaints may be sent to support@sixiluo.com. Apple, Cloudflare, and Resend are separately responsible under their own privacy policies when they independently determine the purposes and means of their processing.

2. Information we process

2.1 Content you create or choose to import

Noteday may process event titles, notes, dates and times, recurrence rules, reminder settings, categories, colors, emoji, and images you select as avatars or wallpapers. When you use an import feature, Noteday reads only the information needed for that feature:

• Calendar: event title, date and time, recurrence information, notes, and location text to create events you review before importing. Noteday does not modify your system calendar.
• Contacts: name, birthday, lunar birthday, and an available thumbnail to create birthday events you choose to import. Noteday does not modify your contacts.
• Photos or files: only images you select through a system picker for use as an event avatar or wallpaper.

This content is stored on your device and in the App Group container by default. If you enable iCloud sync, it is uploaded to Apple CloudKit. If you share an event, the selected event and associated images are made available to participants you specify through Apple CloudKit.

2.2 Settings, identifiers, and on-device logs

Noteday stores settings such as appearance, sorting, reminders, sync status, and purchase unlock status on your device. Noteday also generates a random diagnostic user ID and synchronizes it across devices using the same iCloud account through Apple’s iCloud key-value store. This ID is not an account, login credential, or Apple ID and does not directly contain your name, email address, or device serial number.

To troubleshoot problems, Noteday creates rolling usage logs on the device. These logs may contain session metadata, the app version, the diagnostic user ID, screen navigation, feature actions, status information, and errors. They do not intentionally export the event database, contacts, calendars, photos, or crash dumps. Release-build privacy processing and length limits are applied, but automated processing cannot guarantee removal of all personal information that a user may enter in free-form text or that may appear in system error details.

2.3 Feedback information

When you choose to submit feedback, Noteday processes the following information:

If the log export fails, Noteday submits your feedback without the attachment. Keeping the log option off does not prevent you from sending feedback or using other features.

3. System permissions

Noteday requests a system permission only when you use the related feature. You can revoke permissions at any time in system Settings, although the corresponding feature may stop working.

• Calendar: read calendar events you choose to import.
• Contacts: read contact fields used for birthday import.
• Photos: select an event avatar or wallpaper.
• Notifications: deliver event reminders you configure on your device.

System pickers and permissions are provided by Apple. Noteday does not receive your Apple ID password, payment card information, or Face ID or Touch ID biometric templates.

4. iCloud sync and event sharing

iCloud sync is optional. When enabled, events, categories, images, reminder configurations, and related preferences are stored and synchronized using Apple CloudKit. Turning sync off stops future synchronization but may not automatically delete data already uploaded to iCloud. You can delete relevant data in Noteday or through Apple’s iCloud storage controls.

Event sharing is limited to participants you specify and uses Apple’s sharing interface and CloudKit permissions. Participants may view a shared event’s title, date, notes, and associated images. Ending a share cannot retrieve content that a participant previously saved, captured, or otherwise copied.

iCloud and App Store services are provided by Apple and are subject to the Apple Privacy Policy and the applicable iCloud and App Store terms.

5. In-app purchases

Noteday in-app purchases are processed by Apple through StoreKit and the App Store. Apple is responsible for payment, transaction records, refunds, and purchase restoration. Noteday receives only the product and verified transaction results needed to unlock features and does not receive or store your complete payment card number, billing address, or government identification.

6. Purposes and legal bases

We process information only to provide the event recording, sync, sharing, reminder, import, and purchase features you request; receive and handle feedback; protect the service and prevent abuse; fix errors and improve Noteday; and comply with legal obligations.

Depending on applicable law, processing may be based on performing a service you requested, your consent, our legitimate interests in security and product improvement, or a legal obligation. Where processing requires consent, you may withdraw it through system Settings, Noteday feature controls, or the relevant feedback action. Withdrawal does not affect processing that was lawful before withdrawal.

7. Service providers and recipients

We require service providers acting on our behalf to process data only for the agreed purposes and to provide protection consistent with applicable law and this Policy. We do not sell or rent personal information, use it for targeted advertising, or use third-party advertising or analytics SDKs to build user profiles.

8. International processing

Apple determines where iCloud, App Store, and mail data is processed based on your Apple Account region and service arrangements. Cloudflare and Resend are U.S. companies, and feedback information may be processed outside your country or region, including in the United States.

Where required by applicable law, we will use contractual, certification, assessment, or other lawful transfer mechanisms and take steps designed to require recipients to provide an appropriate level of data protection.

9. Retention and deletion

• On-device data: retained until you delete it in the app, erase the app’s data, or uninstall the app. Confirm whether you need a backup before uninstalling.
• iCloud data: retained until you delete it through Noteday or iCloud, or as otherwise handled under Apple’s retention rules. Merely turning sync off may not delete an existing cloud copy.
• Shared data: generally retained until the owner stops sharing or deletes the event. Copies independently made by participants are outside our control.
• Feedback records: feedback records in Cloudflare D1, and feedback emails and optional diagnostic attachments in Resend and the support mailbox, are normally retained for no more than 24 months after receipt and may be deleted or de-identified earlier after the issue is resolved. Diagnostic attachments are not stored in D1.
• Security and service logs: retained by service providers for the shortest period needed under their service rules. Cloudflare’s current application-level rate-limit window is 60 seconds.

Records may be retained longer when reasonably necessary for a legal obligation, dispute, security investigation, or abuse prevention. They will be deleted or de-identified when that reason ends. After a deletion request is completed, backup copies may remain until the service provider’s normal rotation cycle finishes but will not be used for another purpose.

10. Your choices and rights

Depending on the law where you live, you may have rights to access, receive a copy of, correct, delete, or restrict processing of personal information; withdraw consent; object to processing; request portability; and complain to a supervisory authority.

• You can edit or delete events in Noteday, revoke Calendar, Contacts, Photos, or Notification permissions in system Settings, and turn off iCloud sync in Noteday settings.
• You can leave the diagnostic log option off. After submitting a log, you may request deletion of the related feedback and attachment.
• To request access to or deletion of feedback, email support@sixiluo.com and provide the feedback ID and approximate submission time where possible. We may verify information related to the request to prevent unauthorized deletion.

Noteday has no separate account, and we will not request an account password or complete payment information to verify a privacy request. We may be unable to directly identify or delete information that exists only on your device, in your private iCloud database, or on another participant’s device; when that happens, we will explain the available device or Apple controls.

11. Security

We use measures proportionate to the risk, including HTTPS transmission, system data protection, server-side field and size validation, access controls, and excluding diagnostic attachments from the feedback database. No Internet transmission or storage system can be guaranteed to be completely secure. Do not intentionally include passwords, full payment card numbers, government identifiers, health information, or other unnecessary sensitive information in feedback or diagnostic logs.

12. Children

Noteday is not directed to children for marketing purposes and does not knowingly ask children to provide personal information. In mainland China, users under 14 should use Noteday with a parent or guardian and must obtain guardian consent before submitting feedback or using another processing activity that requires consent. Elsewhere, the locally applicable age threshold applies. A guardian who believes a child submitted information without appropriate consent may contact us to request deletion.

13. Changes to this Policy

We may update this Policy when features, service providers, or legal requirements change, and we will update the date at the top of the page. For a material change to processing purposes, information categories, recipients, or user rights, we will provide a prominent in-app or other appropriate notice and obtain renewed consent where required by law.

14. Contact us

For questions about this Policy or to exercise privacy rights, contact support@sixiluo.com.