Privacy Policy

1. Who We Are

Size Notes ("the App", "we", "us", or "our") is a mobile application developed and published by Anorld Mukone ("Developer"). The App is available on Apple iOS and Google Android platforms. By downloading or using Size Notes you agree to this Privacy Policy.

If you have questions about this policy, contact us at: manorldsapiens@gmail.com

2. Two Modes: Local-Only vs. Family & Sync

Size Notes operates in two distinct modes. Understanding which mode you are using tells you exactly what data, if any, reaches our servers.

Family & Sync is an entirely optional, user-initiated feature. The App is fully functional without it and no account is ever required.

3. Information Stored Locally on Your Device

All data you enter into Size Notes is written to your device's local storage using the operating system's standard data persistence APIs (SharedPreferences on Android; NSUserDefaults on iOS). This is the primary and default storage location for all users.

If you do not enable Family & Sync, this data never leaves your device. If you delete the App, all locally stored data is removed by the operating system.

If you do enable Family & Sync, the same data is additionally synced to our secure cloud servers so it is accessible across your devices and shared family members. You can disable sync and request server-side deletion at any time (see Section 12 — Your Rights).

4. Camera and Photo Library

The App requests access to your camera and photo library for the following limited purposes only:

• Camera: To scan QR codes shared by other Size Notes users, and optionally to take a profile photo.
• Photo Library (read): To let you select a photo to use as a profile avatar.
• Photo Library (write): To save a generated QR code image to your camera roll when you choose to do so.

Photos are processed locally on your device and are never uploaded to any server. You may deny or revoke these permissions at any time in your device Settings without losing other functionality.

5. QR Code Sharing

Size Notes allows you to voluntarily share a profile's measurements via a QR code or a text link. When you share, the measurements you select are encoded into the QR code data or the link itself. The recipient can scan or paste this data into their own copy of the App.

We do not act as an intermediary server in this exchange. Sharing is peer-to-peer. You are responsible for deciding what information to share and with whom.

6. Family & Sync — Optional Cloud Feature

Family & Sync is an optional feature that lets you sync your Size Notes data across multiple devices and share profiles with trusted family members you explicitly invite. It is not enabled by default and requires you to create an account.

What we collect when you enable Family & Sync:

• Email address — used as your account identifier and for account recovery. We do not use it for marketing unless you separately opt in.
• Profile data you choose to sync — profile names, emojis, photos, measurements, wishlists, and gift ideas that you enable sync for. You control which profiles are synced.
• Group membership — the list of family members you invite and who accepts. No profile data is ever shared with a group member automatically; each share is an explicit action you take.
• Push notification token — a device-level token provided by Apple (APNs) or Google (FCM) used to deliver in-app notifications (e.g., a family member updates a shared profile). Tokens contain no personal information and are rotated by the OS periodically.
• Timestamps — created_at / updated_at for sync conflict resolution. These are never surfaced to other users.

What we do NOT collect even with Family & Sync enabled:

• Payment information (handled entirely by Apple or Google — see Section 7)
• Location data
• Device contacts
• Advertising identifiers

How we protect your synced data:

Synced data is transmitted over TLS (HTTPS) and stored in an encrypted database hosted on servers located within the European Union and compliant with GDPR requirements. Access is restricted to authenticated requests from your account only — family members can only see data you have explicitly shared with them. We do not share synced data with third parties.

Data retention:

Your synced data is retained as long as your Family & Sync account is active. If you delete your account (in-app via Settings → Family & Sync → Delete Account, or by emailing us), all server-side data associated with your account is permanently deleted within 30 days. Shared data that other family members have explicitly downloaded to their local devices is outside our control.

7. In-App Purchases

Size Notes offers an optional one-time in-app purchase ("Size Notes Pro") to unlock unlimited profiles. Payment is processed entirely by Apple (App Store) or Google (Google Play). We do not receive or store your payment card details. The only record we retain is a boolean flag on your device confirming the purchase has been made.

For purchase-related queries, please refer to Apple's or Google's respective privacy policies.

8. Analytics and Crash Reporting

We may use privacy-respecting, aggregated crash reporting (e.g., provided by the operating system's built-in diagnostic tools) to identify and fix bugs. Any such data is anonymized, contains no personal information, and is subject to Apple's or Google's respective privacy policies depending on your platform. We do not use third-party analytics SDKs or advertising networks.

9. AI Gift Finder Feature

The Gift Finder feature generates a suggested prompt based on the selected profile's measurements. This prompt is copied to your clipboard or opened in a third-party AI service (such as ChatGPT or Claude) that you choose to use. Size Notes itself does not send any data to AI services. Any data shared with a third-party AI service is governed by that service's own privacy policy.

10. Children's Privacy

Size Notes is not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect any personal information from children. Parents and guardians who believe their child's information has been submitted should contact us immediately at manorldsapiens@gmail.com and we will assist with deletion.

11. Data Security

Local-only users: your personal information is protected by your device's built-in security mechanisms (passcode, biometrics, encryption at rest). We recommend keeping your device's operating system and security settings up to date.

Family & Sync users: data in transit is protected by TLS 1.2+. Data at rest is stored in an encrypted database with access control at the row level — no user can access another user's data unless they belong to the same group and the owner has explicitly shared that profile. We apply industry-standard security practices including regular dependency updates, rate limiting on API endpoints, and hashed passwords (bcrypt). We do not store passwords in plain text.

If you believe you have found a security vulnerability, please disclose it responsibly by emailing manorldsapiens@gmail.com before making it public. We will respond within 48 hours.

12. Your Rights

Your data is under your control at all times. Depending on your jurisdiction (including GDPR in the EU/UK and CCPA in California), you may have the right to access, correct, port, restrict, or erase your personal data. Here is how to exercise those rights in practice:

• Delete a profile: tap the profile → Settings → Delete Profile. Data is removed from your device immediately. If Family & Sync is active, the deletion is propagated to our servers within minutes.
• Delete all local data: uninstall the App. The OS removes all locally stored data automatically.
• Delete your Family & Sync account and all server-side data: go to Settings → Family & Sync → Delete Account, or email us at manorldsapiens@gmail.com. All server-side data is permanently deleted within 30 days of the request.
• Export your data: use the Share feature on any profile to copy all size information in a portable format.
• Access or correct your data: all data is visible and editable directly in the App. For a structured data export, contact us at manorldsapiens@gmail.com and we will provide a machine-readable copy within 30 days.
• Withdraw consent / opt out: you can disable Family & Sync at any time in Settings. The app reverts to fully local-only mode and no further data is transmitted to our servers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. Continued use of the App after a change constitutes acceptance of the new policy. We encourage you to review this page periodically.

14. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us: