Your journal stays yours

The short version

Everything you write in SensiNote — entries, moods, notes, photos, videos and the people you attach — is stored in the app's own database on your device, and syncs through your personal iCloud account if you have iCloud switched on. We run no server, so none of it is ever sent to us and we cannot read it.

There is no sign-up, no login and no user profile. The app contains no analytics and no crash-reporting SDK.

The free version shows banner ads served by Google AdMob. Ad serving involves your device — not your journal: the ad SDK has no access to your entries, notes, photos or contacts, and none of that content is ever used to target ads. A one-time in-app purchase removes the ads and the ad SDK stops loading altogether.

What you write, and where it lives

The following is written to the app's own storage on your device:

• Entries: mood step, emoji, colour, note text and the date and time you set.
• Attachments: the photos and videos you add to an entry.
• People: the contacts you import or create, including their photo, phone numbers, email addresses and postal addresses.
• Settings: your colour and emoji palette, reminder time, and the switches you have flipped.

iCloud sync

With iCloud switched on, SensiNote keeps your entries and their attachments in sync across the devices signed in to the same Apple Account. The data goes into the private database of your own iCloud account, under Apple's encryption and Apple's privacy policy.

We have no access to that container, no key to it and no copy of it. Nothing in it is shared with anyone, and it plays no part in advertising.

You can turn iCloud off for SensiNote at any time in the system Settings, under your Apple Account. If you do, the app keeps working with the copy already on that device.

If you have device backups switched on in iOS, the app's local data is also part of the backup iOS makes, again controlled by your Apple Account settings rather than by SensiNote.

Permissions the app asks for

Contacts. Used only when you tap the import button and pick someone. The details you choose are copied into SensiNote's local database. The app does not read your address book in the background and never uploads it. You can decline the permission and still add people by hand.

Notifications. Used only to schedule the daily reminder at the time you set in Settings. The notification is created and delivered locally on your device.

Tracking. On iPhone and iPad the system asks, once, whether SensiNote may track you across other companies' apps and websites. This is Apple's App Tracking Transparency prompt and it exists only because of advertising. Say no and you still get ads, just non-personalised ones. You can change the answer at any time in Settings → Privacy & Security → Tracking.

Advertising in the free version

The free version shows a banner ad at the bottom of the three main lists — entries, calendar and people. Detail pages, the editor and the full-screen media viewer never show one.

The ads are served by Google AdMob, which is a third party with its own privacy policy. To fill a banner, the AdMob SDK collects information about the device and about the ad itself, typically including:

• Device and advertising identifiers, such as the IDFA when you have allowed tracking, or a non-personalised identifier when you have not.
• Device and app information: model, operating system version, language, app version and IP address, from which a coarse (city-level) location can be derived.
• Ad interactions: which ad was requested, whether it was shown, and whether it was tapped.

What ads never touch

This matters more than the list above, so it gets its own heading. The ad SDK runs alongside the app; it does not run inside your journal.

• Your entries, moods, note text, photos and videos are never read by the ad SDK and never leave the app for advertising purposes.
• The people you import or create, and their phone numbers, emails and addresses, are never shared with any ad network.
• Nothing in your iCloud container is available to advertising, in either version of the app.
• No profile of you is built or sold by us. We receive only aggregate revenue figures from Google — impressions and earnings, never anything about an individual.

Your choices about ads

Where local law requires consent — for example in the European Economic Area, the United Kingdom and Switzerland — SensiNote shows a consent form on first launch, built with Google's User Messaging Platform. Your choice is stored on the device and honoured for every ad request after it.

You can reopen that form at any time from Settings inside the app and change your mind, including withdrawing consent entirely.

If you are in a region covered by US state privacy laws, the same form carries the opt-out for the sale or sharing of personal information.

Refusing consent, or refusing the tracking prompt, does not restrict the app. Every feature stays available; the ads simply become non-personalised.

Removing the ads

SensiNote offers a single one-time in-app purchase that removes advertising permanently. Once it is active, the ad SDK is not initialised and no ad requests are made at all.

The purchase is handled entirely by Apple through the App Store. We never see your payment details, card number or billing address. The app asks StoreKit whether the purchase belongs to your Apple Account and stores only a yes or no on the device — there is nothing sent to us and no account to create.

Restoring the purchase on another device works the same way, through the same Apple Account. Refunds are requested from Apple, not from us.

Third parties

Google. Used for advertising in the free version, through the AdMob SDK and the User Messaging Platform consent form. Google's handling of the data described above is covered by Google's own privacy policy and by the list of advertising partners shown inside the consent form.

Apple. SensiNote is distributed through the App Store, sync runs on iCloud and purchases run through StoreKit. Apple provides us with aggregate, anonymous figures such as download, purchase and crash counts. None of it can be tied back to what you wrote in the app.

There is no analytics SDK, no attribution SDK and no crash-reporting SDK in the app, in either version.

How long things are kept

Your entries stay until you delete them — we have no retention period to apply, because we hold nothing.

Consent and tracking answers are stored on the device until you change them or remove the app. How long Google keeps ad request data is set out in Google's own policy.

Deleting your data

Delete an entry by swiping it away in the list, or with the Delete action in the calendar's day list. Delete a person from their page.

Deleting the app from your device removes its local database and all attachments with it. If you used iCloud sync, the copy in your iCloud account is removed from the system Settings, under your Apple Account → iCloud → Manage Account Storage.

There is no account to close and no deletion request to file with us, because there is nothing on our side to delete.

Children

SensiNote is not directed at children. Ad requests are marked so that they are not treated as directed at children, and the app is rated accordingly on the App Store.

We do not knowingly collect personal information from children. If you believe a child has used the app in a way that concerns you, write to the address below.

Changes to this policy

If a future version of the app changes what is stored, where it goes, or who else is involved, this page is updated before that version ships, and the date at the top changes with it.

Contact

Questions about any of this, or about a specific behaviour you have seen in the app, can be sent to the address below.