ODude Note
ODude Notev2.1.2Private & Encrypted Notes
Apple App Store Guideline 5.1.1 Compliant

Privacy Policy

Last Updated: October 22, 2026 • Applicable to ODude Note for iOS & Android

Core Privacy Commitment

ODude Note is built upon a Zero-Knowledge, Offline-First Architecture. We do not require you to create an account, log in with an email address, or provide any personal identification. Your notes, hidden vault contents, health metrics, and menstrual records are stored locally in an on-device SQLite database and are NEVER uploaded to any ODude servers.

1. Information We Collect

We do not collect, process, or sell your personal data. Specifically:

  • Notes & Vault Data: Plaintext notes and XChaCha20-Poly1305 encrypted vaults remain exclusively on your device. We have no mathematical way to access, decrypt, or read your notes.
  • Health & Vitals Records: Blood pressure, blood sugar, body temperature, weight, and menstrual cycle logs remain strictly in your local database. They are never transmitted to medical brokers or data harvesters.
  • AI Prompt Templates: Saved prompts and dynamic placeholders remain exclusively local.
  • No User Accounts: There is no sign-up form, registration API, or centralized user database.

2. Cryptography & Encryption Standards

When you designate a note as a Vault or create a named Lock, ODude Note applies:

  • Cipher: XChaCha20-Poly1305 AEAD authenticated encryption.
  • Key Derivation: SHA-256 hash derived from your custom passphrase and a 32-byte cryptographically random salt.
  • Nonce: 24-byte cryptographically secure random nonces per payload, eliminating nonce-reuse risks.

3. Third-Party Services & Integrations

To provide optional cloud backup and app marketplace functionality, the app interacts with the following certified providers:

Google Drive API (Optional Backup)

If and only if you explicitly choose to backup your notes to Google Drive, the app uses standard OAuth 2.0 to write encrypted archive files to your personal Google Drive storage space. ODude has zero access to your Google credentials or drive files.

RevenueCat & Apple In-App Purchase

ODude Note Pro subscriptions are processed securely by Apple App Store (via StoreKit) and verified using RevenueCat. RevenueCat only processes anonymous purchase receipt tokens to validate your entitlement. No payment credentials or personal identifiers are stored.

Google Mobile Ads (AdMob)

For free-tier users, Google Mobile Ads may display banner advertisements. You can remove all advertisements permanently by upgrading to ODude Note Pro.

4. Data Retention & Account Deletion (App Store Guideline 5.1.1)

Because ODude Note does not require account creation, you do not have to submit a formal request to delete an account from remote servers. You have absolute autonomous control over your data:

  1. Local Wipe: Inside the application, navigate to Settings > Data Management > Clear All Notes & Vaults. This immediately purges the SQLite database with zero recovery.
  2. Uninstalling the App: Deleting ODude Note from your iOS or Android device deletes the local SQLite container sandbox immediately.
  3. Google Drive Removal: If you enabled optional cloud backup, you can delete the backup folder from your personal Google Drive or revoke app permissions in your Google Security Dashboard at any time.

5. Children's Privacy

Our application does not knowingly collect any personally identifiable information from children under the age of 13.

6. Contact Information & Data Protection Officer

If you have any questions or feedback concerning our privacy practices, please contact us directly:

Entity: ODude

Support Email: hello@odude.com

Website: https://odude.com

Application: ODude Note (Bundle: com.odude.note)