Your notes are yours.

This Privacy Policy explains how TuckR89 LLC ("TuckR89," "we," "us") handles information in the SecureNotes by TuckR89 mobile application and related services.

1. Information you provide

When you use account features, SecureNotes by TuckR89 may process your email address and verification-code challenge information to authenticate you. If you contact support, we receive the information you include in your message. When you create an account, we may also retain the Terms and Privacy Policy versions you accepted or acknowledged and the associated acceptance timestamp.

2. Note content

Local note content is stored in an encrypted vault on your device. When Secure Sync is used, note titles, bodies, tags and checklist content are encrypted on the device before transmission. The Secure Sync design is intended for the backend to store opaque ciphertext and limited synchronization metadata rather than plaintext note content.

3. Pro image attachments

If you use Pro image attachments, SecureNotes processes the images you select or capture for use in a note. Before cloud upload, the app is designed to perform image handling on your device, which may include orientation correction, resizing, compression or format normalization. SecureNotes is also designed to remove GPS/location information and other unnecessary EXIF metadata before the processed image is encrypted and uploaded.

4. Client-side image encryption

Processed image attachments are designed to be encrypted on your device before they are transmitted to SecureNotes cloud storage. TuckR89's application backend is intended to handle encrypted attachment data and operational metadata needed to authorize access, enforce limits, synchronize devices and delete data. TuckR89 is not intended to receive or store plaintext copies of your synced image attachments.

5. Cloud image storage and service providers

Encrypted SecureNotes image attachments may be stored using Cloudflare R2 object-storage infrastructure. The SecureNotes storage bucket and credentials are intended to be isolated from unrelated TuckR89 product storage. Cloudflare may process encrypted object data and technical information necessary to provide storage infrastructure. SecureNotes does not intentionally make attachment objects publicly accessible.

6. Attachment and storage metadata

To operate image storage, SecureNotes may process limited attachment metadata such as an opaque attachment identifier, note/account relationship, encrypted object size, image dimensions, media type, upload state, storage usage, deletion state and timestamps. Object names are designed to use opaque identifiers rather than your email address, note title or original image filename.

7. Device and session information

SecureNotes by TuckR89 may process a random installation/device identifier, device label, platform, product-scoped session information, account identifier, synchronization revisions, encryption/key-provisioning status and deletion state to provide authentication, device management, recovery and sync.

8. Subscription information

If SecureNotes by TuckR89 offers a paid Pro subscription, the applicable app store processes the purchase. SecureNotes may receive product, entitlement and purchase-verification information needed to determine subscription status and whether image storage is available. TuckR89 does not receive your full payment-card number from the app store.

9. Advertising and analytics

SecureNotes by TuckR89 is designed without advertising or behavior-tracking analytics in the current product. We may still use operational server logs necessary to secure and operate account, billing, storage or sync services, subject to data minimization and security controls.

10. How information is used

We use information to authenticate users, provide and secure the app, synchronize encrypted notes and image attachments when enabled, manage devices and entitlements, enforce image-count and storage limits, respond to support requests, prevent abuse, maintain service reliability, process deletion and comply with legal obligations.

11. Pro expiration and image retention

If a Pro entitlement ends, new image uploads may be disabled immediately. Existing encrypted cloud image attachments are intended to remain available for a 30-day grace period so you can renew Pro or retrieve content. After that grace period, SecureNotes may permanently delete the encrypted cloud image attachments associated with the expired entitlement. Text notes are not deleted solely because Pro ends.

12. Trash, permanent deletion and retention

Encrypted image attachments may remain stored while their parent note or attachment is recoverable from Trash, and that storage may continue to count toward the account's image-storage allowance. When an attachment or note is permanently deleted, SecureNotes schedules associated encrypted image objects for deletion. Deletion may involve asynchronous processing, retry queues and limited operational or backup retention. We retain other information only as long as reasonably necessary for the purposes described here, subject to security, legal and dispute-resolution requirements.

13. Account and data deletion

You can initiate deletion from the SecureNotes by TuckR89 app where available. Account deletion is designed to remove SecureNotes cloud ciphertext, encrypted image attachments, attachment metadata, change records, registered devices, entitlements, sessions, verification records and the SecureNotes account identity associated with the account, subject to limited information that must be retained for legal, fraud-prevention or dispute-resolution purposes. See our Data & Account Deletion page for instructions and support options.

14. Security

We use technical and organizational safeguards designed to protect SecureNotes by TuckR89 data, including client-side encryption for synchronized note content and image attachments. No system is guaranteed to be perfectly secure. You are responsible for protecting your devices, email account, app-lock credentials and any recovery material provided by SecureNotes.

15. Children

SecureNotes by TuckR89 is a general-purpose productivity application and is not directed to children under 13. If you believe a child has provided personal information in violation of applicable law, contact us.

16. International processing

Information may be processed in countries where TuckR89 or its service providers operate. Applicable privacy rights may vary by location.

17. Changes

We may update this policy as SecureNotes by TuckR89 changes. The updated date and policy version above will be revised when material changes are published.

18. Contact

Questions about this policy can be sent to support@tuckr89.com.