Privacy policy

1. Who we are

Notig is an iPhone notes app provided by Metin Arslantürk. This policy covers the app and this website. For privacy questions or requests, contact contact@apps.arslanturk.dev. Please do not include your passphrase or private content in support messages.

2. Your content stays on your device

Normal notes, secret notes, imported photos and videos, thumbnails, and your secret phrase are stored on your iPhone. We do not operate a cloud vault and do not receive or upload this content to our servers. Notig does not require an app account or an email address. Your content is not sent to RevenueCat, Mixpanel, or Meta. Notig does not show ads. Your advertising identifier is used only if you allow tracking when iOS asks. Purchase, paywall, usage analytics, and ad-install measurement are described below.

3. Protection and its limits

Private documents, media, and thumbnails are encrypted. Encryption keys and the secret phrase use iOS-protected storage. The private space locks when Notig goes to the background. These protections are intended to provide everyday privacy; they are not a guarantee against compromised devices, someone who knows your phrase, screenshots, screen recording, or information you share through a keyboard, clipboard, or another app.

4. No backup, sync, or content recovery

Notig’s local data is excluded from device backups and does not sync to iCloud. Deleting the app, erasing its data, or losing your device can permanently lose your notes and media. There is no cloud copy, recovery service, or forgotten-phrase reset. Offloading the app preserves its local data. Restoring a purchase restores premium access, not your content.

5. Photos and videos

You choose individual items using Apple’s system photo picker; Notig does not request access to your entire photo library. Importing creates a separate encrypted copy in Notig. Originals remain in Photos or iCloud Photos until you remove them yourself. Protected temporary files are used for import, playback, and user-requested sharing, and are cleaned up after use, on backgrounding, and on the next launch. You can save or share the original photo or video using Apple’s system activity sheet. Saving to Photos requests add-only permission when needed. Saved or shared copies are outside Notig and follow the destination’s privacy and backup settings. Items you choose through the picker may first be downloaded by iOS from iCloud Photos.

6. Payments and RevenueCat

Apple handles in-app payments; we do not receive your payment-card details. RevenueCat manages and validates premium access. It receives an anonymous app user ID, purchase and transaction history, and technical purchase information such as app/SDK version, platform, transaction dates, product identifiers, currency, and storefront. RevenueCat also receives paywall views and interactions, associated with the anonymous purchase ID, to measure conversion and improve the purchase experience. This information is used for purchase validation, restoration, entitlement management, purchase analytics, and related app functionality—not advertising or cross-app tracking. It is separate from your local notes, phrase, and media. See RevenueCat’s privacy policy and Apple’s privacy policy for their processing.

7. App usage analytics

Notig uses the Mixpanel Swift SDK to understand onboarding completion, opening and locking the private space, note creation and deletion, media import outcomes, paywall use, and purchase or restore outcomes. Events contain a random installation identifier, timestamps, app/build and SDK version, operating-system name, and event-processing metadata. We do not send note text, titles, note identifiers, photos, videos, filenames, secret phrases or phrase characteristics, advertising identifiers, or session recordings. Automatic interaction capture is disabled. Starting with version 1.1, Mixpanel uses the connection IP to derive approximate location, including country, region, and city, for analytics. Events also include the device region setting, which may differ from physical location. Notig does not request GPS or precise location access. Mixpanel receives the connection IP as a network service.

Usage analytics is enabled by default. The app does not display a separate analytics permission prompt or Settings control. Any analytics opt-out already saved by an earlier build remains respected. Deleting the app stops future app events but does not automatically delete previously received events. Contact us with privacy questions or requests using the support details in this policy. RevenueCat separately processes purchases and paywall analytics. Events may be queued on your device until a network connection is available. We use this information to improve the app, not for advertising or cross-app tracking. See Mixpanel’s privacy policy.

8. Measuring our Facebook and Instagram ads

Starting with version 1.2, Notig includes Meta’s Facebook SDK (core module only) so we can measure whether our ads on Facebook and Instagram lead to installs. The SDK sends Meta automatic install and app-open events with technical information such as app and SDK version, operating-system version, device model, time zone, IP address, and event time, together with an identifier the SDK generates for this installation. Meta may use this information, including through its Aggregated Event Measurement, to report and optimize ad delivery. After onboarding, iOS asks once whether Notig may track you. Only if you choose Allow does the SDK also send your device’s advertising identifier to Meta, so Meta can link the install to the ad you saw. If you choose Ask App Not to Track, the advertising identifier is not collected and Meta receives only the events above for aggregated measurement. You can change this at any time in iOS Settings → Privacy & Security → Tracking. No custom in-app events are sent. Note text, titles, photos, videos, filenames, and your secret phrase are never sent to Meta. The SDK follows the same saved analytics preference as usage analytics. See Meta’s privacy policy.

Notig also supports Apple’s SKAdNetwork. If you install Notig after seeing an ad, iOS itself may later send the ad network an anonymous, delayed confirmation of the install and whether premium was purchased. It does not identify you or your device.

9. This website and support

This website is hosted by Cloudflare. Like other hosting providers, Cloudflare processes connection data such as IP address, requested URL, browser information, and request time to deliver and protect the website. We do not add advertising trackers, analytics scripts, tracking cookies, or a newsletter form. The passphrase demonstration runs only in your browser: its input is not sent or saved. If you email support, your email address and the information you send are processed to respond and handle the request. Do not send sensitive note content or your phrase. See Cloudflare’s privacy policy.

10. Retention and deletion

You control local content and can delete individual notes or media in the app. Deleting Notig removes its local app data. iOS may retain Keychain records, but opening the vault also requires key material in the deleted app container. We do not promise forensic erasure of device storage. Deleting the app does not automatically erase Apple’s or RevenueCat’s transaction records, which may be retained for restoration, fraud prevention, legal obligations, and purchase support. Mixpanel usage events are retained to analyze and improve the app and are not erased by uninstalling. Meta retains ad-measurement events under its own policies. We do not link the random analytics identifier to your name, email, Apple account, or RevenueCat identifier. Contact us about analytics deletion requests; we may need the relevant identifier to locate records. Support messages are retained only as needed to handle requests and meet legal obligations. Contact us for requests about records we or our service providers hold.

11. Your rights and service providers

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of personal information, and to complain to a data-protection authority. Local app content is accessible only on your device; we cannot retrieve it for you. Contact contact@apps.arslanturk.dev about information associated with a support, analytics, or purchase request. Where applicable, we process information to provide the app and purchases, respond to support, protect the service, and satisfy legal requirements. Apple, RevenueCat, Mixpanel, Meta, Cloudflare, and email providers may process information in countries outside your own under their applicable safeguards and policies.

12. Children and policy changes

Notig does not knowingly collect personal information from children through account registration and does not request an age, contact list, or profile. Purchases and use by minors should follow applicable law and Apple’s family controls. If you believe a child has sent us personal information, contact us so we can address it. We may update this policy to reflect changes to the app, providers, or legal requirements, and will give notice of material changes where required. The date above identifies the current version.