Privacy Policy for Ciphora
No accounts No cloud No ads No analytics No internet access
1. Who we are
Ciphora (“the App”) is an Android note-taking app published on Google Play
under package name com.ciphora.app. The developer operates no
servers for this app and provides no cloud sync service.
2. Scope of this policy
This policy covers the Ciphora Android app only. It does not cover:
- This GitHub Pages website itself (a static site that collects nothing).
- Any third-party app or service you choose to share an exported backup with (e.g. a file manager, cloud drive, messenger) — their policies apply once you share a file with them.
3. Data we collect — none
We do not collect, transmit, or have access to:
- Note titles, contents, checklists, labels, colors, or attachments
- Your lock password or encryption keys
- Names, email addresses, phone numbers, or account identifiers
- Location, contacts, photos, or device identifiers
- Usage analytics, crash reports, or advertising identifiers
The App declares no INTERNET permission in its
Android manifest, so it technically cannot send data over the network.
There are no accounts, no sign-in, no servers, and no analytics SDKs
(verified: no Firebase, Crashlytics, ads, or tracking libraries).
4. What is stored on your device
Everything you create stays in the App’s private on-device storage:
| Data | Where | Notes |
|---|---|---|
| Notes, checklists, labels, archive / trash state | Encrypted SQLite database (ciphora.db) in app-private storage | Only readable when you unlock with your password |
| Vault metadata (salt, unlock verification data) | App-private storage | Used to verify your password; password itself is never stored |
Backup files you export (.tknbackup) | Location you choose / share target you pick | Encrypted; you control where they go |
Uninstalling the App deletes the app-private database. Exported backup files stored outside the App (e.g. Downloads, Drive) are not deleted automatically — delete them yourself.
5. How your notes are protected
- Database encryption: notes are stored in a SQLCipher-encrypted SQLite database, unlocked with a key derived from your lock password.
- Key derivation: Argon2id (memory 19456 KiB, 2 iterations, 1 lane) derives a 256-bit key from your password + random 16-byte salt.
- Backup encryption: exports are AES-256-GCM encrypted payloads (fresh salt + nonce per export). They can only be restored with the same password.
- Password handling: your password is never stored. If you forget it, neither we nor anyone else can recover your notes — this is by design.
6. Permissions
| Permission | Requested? | Purpose |
|---|---|---|
Internet (INTERNET) | No | App works fully offline |
| Storage / Photos / Media | No broad permission | Backup import/export uses the system file picker (Storage Access Framework) — you pick specific files; the App gets access only to files you select |
| Camera, Microphone, Location, Contacts | No | Not used |
7. Backups, export & sharing (you control)
- Backup / restore is manual and user-initiated only. Nothing is uploaded automatically.
- Exports create an encrypted
.tknbackupfile you can save or share via the Android share sheet. - If you share a backup to another app (email, Drive, messenger), that copy is governed by that app/service. Keep backups private — anyone with the file and your password can read them.
8. Third parties, SDKs & tracking
- No third-party SDKs that collect data. No ads, no analytics, no social logins, no crash-reporting services.
- No data sharing or selling. There is nothing to share because nothing is collected.
- Open-source Flutter packages used (e.g. database, encryption, rich-text editor) all run on-device.
9. Google Play Data Safety summary
| Question | Answer for Ciphora |
|---|---|
| Does the app collect or share any user data? | No. No data is collected, transmitted, or shared with the developer or third parties. |
| Is data encrypted in transit? | Not applicable — no network transmission. User-exported backups are AES-256-GCM encrypted at rest. |
| Is data encrypted at rest? | Yes — SQLCipher database + encrypted backup files. |
| Can users request data deletion? | Yes — delete notes in-app (Trash → Delete forever) or uninstall. No server-side data exists to delete. |
| Independent security review? | No. |
10. Children's privacy
Ciphora does not collect personal information from anyone, including children under 13. Because all data stays on-device, there is no child data for us to access or process.
11. Retention & deletion
- Notes persist on your device until you delete them.
- “Move to trash” → “Delete forever” permanently removes a note from the database.
- Uninstalling the App removes the encrypted database and vault metadata from app-private storage.
- We retain nothing because we receive nothing.
12. Security
We use modern, peer-reviewed primitives (Argon2id, AES-256-GCM, SQLCipher) and request no network access to minimise attack surface. However, no software is perfectly secure. Protect your device (screen lock, OS updates) and choose a strong, unique password for best protection.
13. Your rights
Since we hold no personal data about you, there is nothing to access, correct, or port from our side. You have full control on-device: view, edit, export, and permanently delete your notes at any time. For questions, contact us below.
14. Changes to this policy
If the App’s privacy behavior ever changes (e.g. optional sync is added), this policy will be updated and the “Last updated” date revised. Material changes will also be noted in the Play Store listing. Continued use after an update constitutes acceptance.
15. Contact
Developer contact for privacy questions / deletion requests:
📧 Email: techikrish95@gmail.com
📦 App: Ciphora (com.ciphora.app)