The Short Version — Plain English
What this means in plain English
- We don't read your notes. Notes are stored on your device and your private iCloud container. We have no access to them.
- We don't track you. No analytics SDK, no ad network, no behavioral tracking of any kind.
- We don't sell your data. Ever. To anyone. For any reason.
- Apple handles payments. We never see your payment details — StoreKit handles everything.
This Privacy Policy describes how FlashNote ("we", "our", or "us") handles information when you use the FlashNote macOS application ("the App"). By using FlashNote, you agree to this policy.
Data We Collect
FlashNote collects the absolute minimum required to function. Here is a complete picture:
iCloud Sync — Private by Design
FlashNote uses Apple's CloudKit framework to sync your notes across your Apple devices. This means:
- Your data is stored in your own private iCloud container — a space that only your Apple ID can access. We cannot access it.
- Sync is end-to-end within your Apple account. Notes travel from your Mac to Apple's servers to your other devices. Apple's infrastructure handles encryption in transit and at rest.
- iCloud sync is optional. The app works fully offline. If you are not signed into iCloud, your notes remain local-only with zero degradation in functionality.
- We receive no server-side notifications about your note content, creation, or deletion. CloudKit is a direct device-to-Apple-to-device pathway.
Apple's Privacy Commitment
Apple's iCloud data protection and CloudKit security practices are governed by Apple's own Privacy Policy at https://www.apple.com/privacy. FlashNote is a downstream consumer of CloudKit — Apple's standards apply.
FlashNote Pro — Payments via Apple
The FlashNote Pro upgrade is processed entirely by Apple's App Store and StoreKit 2. We never see, store, or process your payment information.
- No payment card data is ever transmitted to or stored by us.
- Purchase receipts are verified via Apple's VerificationResult API on-device — no server call to our backend is made.
- Pro entitlement is stored locally and refreshed from Apple's servers when you open the app.
- Family Sharing is handled entirely by Apple — we have no visibility into your family members.
- Refund requests must be directed to Apple via https://reportaproblem.apple.com.
Crash Diagnostics — Your Choice
FlashNote does not include any third-party analytics SDK. We have opted into MetricKit, Apple's native crash and performance reporting framework, which is subject to your existing macOS privacy preference under System Settings → Privacy & Security → Analytics & Improvements.
- If you have opted in to sharing analytics with app developers, anonymised crash reports may be delivered to us via MetricKit. These contain no note content and no personal identifiers.
- If you have opted out, no diagnostic data is sent. FlashNote respects that choice completely.
- Crash reports are used solely to fix bugs — never for marketing, profiling, or any commercial purpose.
Third-Party Services
FlashNote uses only Apple's first-party frameworks. There are no third-party SDKs, ad networks, analytics services, or tracking libraries embedded in the app.
Data Security
FlashNote is built with security as a first principle, not an afterthought:
- App Sandbox: FlashNote runs in Apple's full macOS App Sandbox — it cannot access files, processes, or system resources outside of explicitly granted permissions.
- No network entitlement: The app has no general outbound network access. The only network communication is via CloudKit and StoreKit — both through Apple's secure infrastructure.
- Encryption at rest: Notes stored in SwiftData are protected by macOS's built-in file system encryption when FileVault is enabled.
- Encryption in transit: All CloudKit communication uses TLS. Apple manages certificates and key rotation.
- No backend servers: FlashNote has no developer-operated servers, APIs, or databases. There is no server to breach.
Children's Privacy
FlashNote is rated 4+ on the Mac App Store and contains no content inappropriate for any age. Because we do not collect any personal information from any user, we have no mechanism to collect information from children under 13, nor do we knowingly do so. The app is fully compliant with the Children's Online Privacy Protection Act (COPPA).
Your Rights & Controls
Because we collect virtually no personal data, most standard data rights are satisfied by default. However, here is how you can exercise full control:
- Export your notes: Use Settings → Export to download all your notes as Markdown files at any time (FlashNote Pro).
- Delete all data: Deleting the FlashNote app removes all local note data. To remove iCloud data, go to iCloud.com → Manage Storage → FlashNote and delete the container.
- Disable sync: Toggle iCloud sync off in Settings → Sync at any time. Notes immediately become local-only.
- Opt out of diagnostics: System Settings → Privacy & Security → Analytics & Improvements → uncheck "Share with App Developers".
- Request information: Email us at flashnote-privacy@ifusiontech.in with any privacy-related request. We will respond within 30 days.
GDPR / CCPA: If you are a resident of the EU or California, you have the right to access, correct, and delete any personal data we hold. Given our minimal data collection, the practical answer is: we hold no personal data beyond what Apple manages on your behalf via iCloud and StoreKit.
Changes to This Policy
We may update this Privacy Policy as the app evolves. When we do:
- The "Last updated" date at the top of this page will be revised.
- Material changes will be communicated via an in-app notice on next launch.
- Continued use of FlashNote after changes constitutes acceptance of the revised policy.
We will never make changes that introduce new data collection or sharing without explicit user consent.
Contact Us
Have a privacy question or concern? We're happy to help.
Privacy questions? We'll respond.
Reach out to our privacy inbox — we respond to all inquiries within 30 days.
flashnote-privacy@ifusiontech.in