The current app keeps your notebook on your device, requires no account and offers no subscription checkout. Please read the sections on local data, deletion, export and website network services.
1. Scope and who we are
This Policy covers the Noppima Android app, noppima.com and communications with our support team. Shanghai Danbohu Network Technology Co., Ltd. (上海淡泊湖网络科技有限公司), registered in Shanghai, China, is responsible for the personal information it processes in these services.
The current app is local-first: no account is required, there is no cloud content sync or AI content processing, and no advertising or behavioural analytics SDK is included. We do not receive a copy of your notebook just because you use local note-taking. Website network traffic, hearts and information you send to support are separate activities described below.
2. Information processed on your device
Notes and organisation: text, links, images and associated source details that you type, paste or share; record timestamps; tags, folders and recycle-bin status. The app uses these locally to save, display, search, edit and export content. Your chosen names for yourself and Noppima, ability levels and milestones, and tutorial progress are also kept locally for continuity.
Preferences: language, theme, list presentation, system-entry and widget settings. System language helps choose an initial language. Current features do not require us to collect contacts, call history, precise location or advertising identifiers, or to build an advertising profile.
Images may contain embedded metadata. The app reads orientation information to display images correctly but does not promise to strip every metadata field from an original file. Review sensitive image metadata before sharing or exporting.
3. Actions and optional permissions
Clipboard: the app reads available clipboard material when you invoke a clipboard capture action. It does not continuously monitor copying in other apps in the background. Android may show its own access notice. Guided practice may write sample text to your clipboard as explained in the tutorial; you can replace or clear it.
Images and camera: the app receives the images you choose through the system picker, or a photo you confirm through the system camera. It does not require access to your entire photo library for an individual selection or take photos in the background.
Sharing and export: the app receives material you deliberately share to Noppima. Export writes to a location you choose through the system file interface, without requiring all-files access. If that location is a cloud drive, any upload by the selected provider follows your choice and that provider's practices.
Notifications and floating entries: optional features use the permissions required by Android to show shortcuts, necessary service status or content previews. They do not read other apps' screens. Widgets and other system surfaces can expose previews to people who can see your device.
You can disable entries or revoke permissions in the app or Android settings. Revoking a permission does not automatically delete content you have already saved.
4. Updates and local diagnostics
Applicable distribution channels fetch a static version manifest over HTTPS from updates.aquelity.com. Hosting infrastructure processes connection information such as IP address, time, request path and network headers. The request does not include notes, images, tags, nicknames or the ability ledger. Store-distributed updates also follow the store's practices.
Builds that provide diagnostics keep size-limited, rotating local logs of events, times, exception types and code locations. A report you generate may also include app version, device model, OS version, language and system exit reasons. These logs exclude note text and are not automatically uploaded. You can view, clear, copy or export them where that feature is provided. We receive a report only if you send it to us.
5. Website delivery, language and the demo
Cloudflare provides hosting, delivery and security for the website. Infrastructure processes IP addresses, request paths, times, browser headers and necessary security data to deliver pages, diagnose problems and address abuse. A first visit to the root homepage may use the country supplied by the network service to choose a language. We do not request GPS location or use an external IP-tracking plugin.
A manual language choice sets a cookie named noppima_site_market, containing your Chinese or international-site preference, for 180 days. It is not used for advertising or cross-site tracking. You can clear or block it in your browser; your selection may then be forgotten.
Demo input and interaction state normally live in page memory. When switching language, sessionStorage key noppima-v4-language-handoff temporarily carries the experience state to the other page and is removed after use. This information is not sent with heart requests or automatically copied into the Android app. Refreshing, closing or clearing the browser may remove it. Downloading demo text is an action you initiate.
Fonts and brand images are served by this site, without requests to a third-party font CDN. We currently use no optional advertising or behavioural analytics cookies.
6. The shared heart counter
The English and Chinese sites share a total through hearts.noppima.com. Reading it retrieves a number. Sending a heart submits a randomly generated request identifier so a network retry does not add the same heart twice. The counter database contains only the total and deduplication identifiers, with no fields for notes, names, email addresses, IP addresses or browser identifiers.
Unconfirmed requests are kept in sessionStorage under noppima-pending-hearts-v1 and removed when completed. They normally end with the tab session, although browser session restoration may preserve them. Server-side random receipts are retained for deduplication until the service ends or that purpose is no longer needed. We do not link them to accounts or other behavioural records.
Network processing still occurs: Cloudflare handles connection and security information for these requests. The total is not a unique-user count and the feature is not a payment transaction.
7. Support and purposes of processing
If you email us, we receive your email address, message and any attachments you choose to send. We use them to answer, investigate an issue, address a rights request or resolve a dispute. Send only relevant information; a full notebook, identity document or another person's private information is usually unnecessary.
Where the GDPR or similar laws apply, necessary service-related support may be based on performing a contract or steps you request; basic website delivery, proportionate security and prevention of duplicate requests may rely on our legitimate interests, subject to your rights and a balancing of interests. Legal obligations can require some processing. We obtain consent where required, including any separately required consent for device storage or new optional processing. Merely reading this Policy is not consent.
We do not sell personal information, use local notes for advertising or AI training, or make legally or similarly significant automated decisions about you. New uses require appropriate notice and a valid legal basis rather than an assumption that this Policy authorises everything.
8. Service providers and disclosure
Cloudflare, Inc. and the applicable Cloudflare service entities provide website delivery, security and hosting, plus Workers and D1 for hearts. Their involvement includes the network information, totals and random identifiers described above. See Cloudflare Privacy Policy for their policy.
Android, device manufacturers, app stores and camera or file providers handle information associated with the system operations you choose under their own practices. Sending email also involves the sender's and recipient's email infrastructure. External communities and websites, including Reddit, apply their policies when you visit them; we do not embed their tracking plugins.
We disclose personal information only as needed for the services described, at your direction, or where law permits or requires it, such as a valid legal request. Processors are subject to appropriate obligations. If a business transfer affects your information, we will provide required notice and require continued protection. We do not imply that these circumstances authorise disclosure of a local notebook we do not hold.
9. Locations and international processing
App records remain primarily on your device. The current app excludes its data from Android automatic cloud backup and device-transfer backup. Exported copies are stored where you select, including any provider you choose.
We operate from China and use global infrastructure. Website network information and support communications may be processed outside your country, including in China, the United States and other countries where relevant service providers operate. This does not mean local app notes are automatically sent abroad.
Where international-transfer safeguards are legally required, we must use an applicable mechanism, such as adequacy arrangements or appropriate contractual safeguards, and provide required notices or consents. Contact us for information about safeguards relevant to your request. This Policy itself is not a transfer agreement or blanket consent to a transfer.
10. Retention and deletion
You control local app content and can delete it in the app. Moving a record to the recycle bin is different from permanent deletion. Uninstalling or clearing app data may remove notes, preferences and progress. Exported copies are not erased when the original is deleted.
Website cookie and session-storage periods are described in sections 5 and 6. Heart receipts remain for the stated deduplication purpose. We retain support information only as needed to resolve the matter, handle related disputes or comply with legal requirements, then delete or anonymise it. Infrastructure logs follow the applicable service configuration and provider rules; we do not claim that all network logs are deleted immediately.
11. Security
Measures include Android app isolation, private local storage, HTTPS for network requests, optional permissions and minimised diagnostics. We do not describe the current app as an end-to-end encrypted cloud service or exported files as an encrypted vault.
No system removes every risk. Protect your device and exported copies. If a personal-data incident occurs in processing for which we are responsible, we will take remedial steps and make notifications required by applicable law.
12. Your rights and choices
You can access, edit, export and delete records locally; change preferences; disable optional entries; revoke system permissions; and clear website cookies and storage. There is no account to close in the current app.
Depending on your location, you may request access, a copy or portability of information we hold, correction, deletion or restriction; withdraw consent; or object to processing based on legitimate interests. You may also complain to a competent data-protection authority. Withdrawal does not affect the lawfulness of prior consent-based processing.
Contact us using section 15. We will respond within applicable statutory time limits, generally within one month for GDPR requests, subject to lawful extensions explained to you. We may seek proportionate verification and will explain any lawful refusal. We cannot retrieve records held only on your device and do not collect extra identity information merely to identify random counter receipts.
13. Children
Noppima is not specifically directed at children and does not ask for a birth date to provide local note-taking. Minors should use it with a parent or guardian. If local law requires parental consent, do not send us personal information without that consent. This includes information about children under 14 where Chinese law applies.
If a guardian believes we have received a child's information without required authorisation, contact us. We will investigate and delete or otherwise protect it as required. Records stored only on a family's device remain under the control of the user and guardian.
14. Changes
This page shows the version and update date. We will draw attention to material changes in a way appropriate to their impact and obtain fresh consent where required. Future accounts, cloud sync or paid services require their own assessment and updated disclosures; they are not pre-authorised by this Policy.
15. Contact
Privacy contact: noppima@aquelity.com. We are Shanghai Danbohu Network Technology Co., Ltd. (上海淡泊湖网络科技有限公司), Shanghai, China.
Use “Noppima privacy request” as the subject if helpful and explain what you would like us to do. Do not send a full identity document or private notebook merely to start a request.