Privacy Policy

1. Scope and provider

This Privacy Policy applies to Doti Notes, including the Android application with package name com.tmobix.doti, and to any other Doti Notes version or service that links to this page.

Doti Notes is provided by Tmobix ("Tmobix," "we," "us," or "our"). Tmobix is the controller of personal information it determines how and why to process. A third-party platform or cloud provider may be a separate controller for information it processes under its own terms.

This policy is intended for users worldwide. Local law may provide additional rights or impose additional requirements that continue to apply.

2. Information we process

Notes and content on your device

Doti Notes lets you create, edit, organize, and export notes, scan pages into notes, and import PDF and Office files as notes. Depending on the feature you choose, content may include handwriting, text, images, stickers, signatures, attachments, audio recordings, videos, imported files, and metadata such as file name, size, type, and modification date.

Some features download fonts, offline language resources, handwriting models, or other app resources. Those downloads do not require Tmobix to receive the note you are editing.

Connected cloud storage

Availability. The current version of Doti Notes does not offer connections to Google Drive, Microsoft OneDrive, or Dropbox. The rest of this section applies only if a future version enables them.

Backups on iOS. If you turn on backup on iOS, Doti Notes copies your notes to your own iCloud Drive. The copies are stored by Apple under your Apple Account and settings; Tmobix does not receive them.

If you connect Google Drive, Microsoft OneDrive, or Dropbox, the app may process your provider account identifier, email address, display name, profile image, authentication tokens, file and folder metadata, and file contents needed for actions you perform.

The access differs by provider. Google Drive access is limited to files Doti Notes creates or that you select through Google Picker. Microsoft OneDrive grants Files.ReadWrite access, which allows the app to list, read, create, update, move, and delete files across the connected OneDrive when you perform those actions. The configured Dropbox integration uses Full Dropbox access and can perform the corresponding actions across the connected Dropbox. Doti Notes requests these broader permissions so its cloud file browser can work from the provider root.

Cloud account metadata is stored locally by Doti Notes. Authentication tokens are protected using operating-system security facilities where available. File transfers are made between the app and the provider you selected. Cloud files remain subject to that provider's privacy policy and your settings with that provider.

Doti Notes account

The current version does not offer a separate Doti Notes account. A connection to Drive, OneDrive, or Dropbox is a third-party cloud connection, not a Doti Notes account.

If a future version introduces Doti Notes account creation, this policy and the app will be updated before that feature is released to describe the account data, sign-in providers, retention, and in-app deletion process.

Purchases, subscriptions, and usage limits

Google Play or Apple processes payments. Tmobix and its service providers may process the product or plan identifier, order or transaction identifier, purchase time, subscription and renewal status, platform, app version, usage-limit records, and an app-generated hashed device identifier to verify or restore entitlements, apply free-use limits, and prevent fraud. Tmobix does not receive your full payment-card number.

Support and privacy requests

If you contact Tmobix, we process the information you choose to provide, such as your email address, message, diagnostic details, and attachments. Do not send passwords, one-time codes, payment-card information, or private documents unless a document is necessary for your request and you understand that it will be received by Tmobix.

Information processed automatically

The app and its service providers may process:

• IP address and an approximate region inferred from it; Doti Notes does not request precise-location permission;
• device model, operating system, app version, language, network state, and technical configuration;
• app-instance and installation identifiers, integrity signals, a hashed device identifier, and an advertising identifier where available and permitted;
• feature usage, screen views, session duration, tool interactions, cloud-provider type, ad impressions and interactions, and subscription events;
• crash reports, stack traces, performance data, error categories, and technical circumstances associated with an error.

For quota, entitlement, and fraud-prevention records, Android derives a persistent identifier by applying SHA-256 to the device's Android ID. On iOS, the app applies SHA-256 to an app-generated UUID stored in Keychain. Tmobix does not receive the raw Android ID or raw UUID through this mechanism. Depending on platform behavior, secure storage, and backups, the resulting app-linked identifier may continue after app data is cleared or the app is reinstalled.

3. Device permissions

A permission gives Doti Notes access on your device; it does not necessarily mean that the accessed information is uploaded to Tmobix.

You can deny or revoke optional permissions in device settings. The related feature may stop working, while other features can continue where technically possible.

4. How we use information

Tmobix processes information to:

• provide note taking and editing, file import and conversion into notes, scanning, export, cloud access, and related features;
• save settings and provide, verify, or restore subscription entitlements;
• measure reliability, diagnose crashes, improve performance, and respond to support requests;
• apply usage limits, detect fraud or abuse, protect the app and backend services, and check app integrity;
• show and measure ads, cap ad frequency, and prevent advertising fraud;
• comply with law, resolve disputes, and enforce the Terms of Service.

Cloud identity and authorization data is optional, but the selected cloud feature cannot work without it. Purchase identifiers are required to verify paid entitlements. Support information is optional, but insufficient information may prevent Tmobix from resolving a request.

You may withdraw consent for future processing where consent is the basis, without affecting processing already completed lawfully. EEA and UK users may object to processing based on legitimate interests. Tmobix will stop that processing unless it demonstrates compelling legitimate grounds or needs the information for legal claims.

5. Sharing and service providers

Tmobix does not sell note contents or support contact information for money. Information is disclosed as described here: to vendors that operate app features, to a cloud provider at your direction, where required by law, to protect rights or safety, or in a business transaction subject to appropriate safeguards.

Note contents are not intentionally disclosed to advertising or analytics providers for advertising or analytics purposes.

These providers may process information in other countries and may act as a processor for Tmobix or as an independent controller, depending on the service. Their own policies explain their current practices.

6. Google API and Drive data

Doti Notes accesses Google Drive information only after you choose to connect your Google account and authorize the requested access. The app uses that access to let you browse, open, download, upload, and synchronize the Drive files you choose.

Doti Notes does not use Google Drive data for advertising, does not transfer it to advertising platforms or data brokers, and does not permit humans to read it except when you give affirmative permission for support or security purposes, when necessary to investigate abuse, or when required by law.

You can disconnect Google Drive in Doti Notes and can also revoke Doti Notes access from your Google Account security settings. Revoking access does not delete files already stored in your Drive.

7. Advertising

The free version contains ads. Advertising providers may process an advertising identifier, IP address, approximate location inferred from IP, device and app information, consent or privacy signals, and ad impressions, clicks, or interactions to serve contextual or personalized ads where permitted, measure results, cap frequency, and prevent fraud.

Available ads depend on your region, device settings, and configuration. You can use any privacy controls presented in the app and the advertising controls offered by your device or Google account. An eligible paid plan may remove or reduce ads in Doti Notes, but it does not erase information already processed independently by an advertising provider.

Tmobix does not sell personal information for money. Some laws may define certain personalized-ad disclosures as a "sale," "sharing," or targeted advertising. Where applicable, you may opt out using available regional controls or send a request to contact@tmobix.com.

Legacy browser "Do Not Track" signals are not a standardized control for native mobile apps, and Doti Notes does not currently respond to them. Advertising providers may collect activity over time and across apps or online services as described in this section and their own policies.

8. Retention and deletion

• Local notes and app data: remain on your device until you delete them, clear app data, or uninstall the app. Files exported to shared storage may remain after app data is cleared or the app is uninstalled.
• Cloud files: remain with Drive, OneDrive, or Dropbox under your settings and that provider's retention rules until you delete them there.
• Cloud connection data: local metadata and tokens remain until you disconnect the provider or clear applicable app data. Uninstall behavior depends on the platform and its backup or secure-storage rules. Disconnecting can leave downloaded or pending local copies in the Doti Notes folder; delete those copies separately if you no longer want them.
• Quota records: are retained for the usage-limit period and for any additional period reasonably needed to detect repeated abuse or correct an entitlement. Security and integrity records are retained while a related risk or investigation remains relevant.
• Purchase and entitlement records: are retained for the subscription or entitlement period and afterward for store refunds, chargebacks, fraud prevention, tax, accounting, or disputes where needed.
• Analytics and diagnostics: follow Tmobix's configured Firebase settings and Google's applicable retention rules. Advertising records controlled by an advertising provider follow that provider's policy.
• Support and privacy communications: are retained while the request is handled and afterward only as reasonably needed for follow-up, security, dispute resolution, or legal compliance.
• Aggregated or de-identified data: may be retained longer when it can no longer reasonably identify you.

Because the current version has no separate Doti Notes account, uninstalling the app does not create an account-deletion request. To ask about identifiable service data controlled by Tmobix, use the Account and Data Deletion page or email contact@tmobix.com.

9. Your choices and rights

Depending on where you live, you may have rights to know or access information, correct it, delete it, restrict or object to processing, obtain a portable copy, withdraw consent, opt out of certain advertising disclosures, appeal a decision, or complain to a data-protection authority. These rights can be subject to legal exceptions.

You can also:

• manage notes and files on your device and cloud files in your provider account;
• disconnect a cloud provider in Doti Notes and separately revoke access in the provider's security settings;
• revoke camera, microphone, or file permissions in device settings;
• manage advertising choices through available app, device, and Google controls;
• cancel a subscription through the store where you purchased it;
• request access to or deletion of identifiable service information controlled by Tmobix.

Send a request to contact@tmobix.com. Describe the right you want to exercise and the app or service involved. Tmobix may request information reasonably necessary to verify the request, and will respond within the period required by applicable law. Tmobix will not discriminate against you for exercising an applicable privacy right.

EEA residents may complain to the data-protection authority where they live or work, or where an alleged infringement occurred. UK residents may complain to the Information Commissioner's Office. Contacting Tmobix first is welcome but does not affect your right to complain.

Tmobix does not use personal information to make decisions that produce legal or similarly significant effects about you.

10. Security and international transfers

Tmobix uses reasonable technical and organizational safeguards designed to protect information. These include encrypted network connections where supported, operating-system protected storage for cloud authentication tokens where available, access controls, and app-integrity checks where implemented (including Play Integrity-based App Check on Android). No system can guarantee absolute security.

Tmobix and its providers may process information in countries other than the country where you live. Provider policies describe their transfer locations and mechanisms. Where Tmobix is responsible for a transfer that requires a specific legal mechanism, Tmobix will use the mechanism required by applicable law. You may email contact@tmobix.com to ask which safeguards apply to your information. When you connect a third-party cloud service, you also direct information to that provider and its processing locations.

11. Children

Doti Notes is a general-audience productivity app and is not directed to children under 13. Tmobix does not knowingly collect personal information from children under 13. If Tmobix learns that it collected such information without legally valid authorization, it will delete the information. A parent or guardian may contact contact@tmobix.com.