The short version
Paste-It is the one app in our catalogue that can send your data off the device, because sharing a note with another person requires it. This policy is specific about when that happens and what is sent.
Signing in is optional. If you continue offline, your notes stay in the app's private storage on your phone and nothing is uploaded. If you sign in with Google, your notes sync to Google's Firestore service under your account so they reach your other devices and anyone you share with.
There is no advertising in the app and we sell nothing to anyone. Section 6 covers one piece of Google analytics that is present in the build, because it would be wrong to leave it out.
1. What the app stores on your device
Whether or not you sign in, the app keeps a local copy of everything so it works without a connection:
| Data | Purpose | Where |
|---|---|---|
| Your notes — title, content, formatting, colour, pinned and archived state, the collaborator list, and created, updated, deleted and last-synced timestamps | The notes themselves, and the sync state machine | On-device database (Room) |
| Display and editor preferences — grid layout, sort order, default note colour, dynamic colour, rich text, checklists, spell check, auto-link, first day of week, widget options | Remembering how you left the app | On-device preferences (DataStore) |
| Reminder settings | Delivering note reminders you set | On-device preferences |
Android backup is explicitly disabled (allowBackup="false"), so none of this is copied into Google's device backup.
2. Signing in, and what it sends
Sign-in uses Google Sign-In. You can decline it and use the app entirely offline — the sign-in screen offers to continue without an account, and every feature except sharing works exactly the same.
When you do sign in, the app receives your Google account identifier, your email address, your display name and your profile photo URL from Google. The identifier and email are what let a note be addressed to you; the name and photo appear in the app's navigation drawer so you can see which account you are in. The photo is loaded straight from Google's servers by the app's image library when that drawer is drawn.
Signing in enables sync, which is described next. Signing out from Settings ends it.
3. What is synced, and who can read it
While you are signed in, each note is written to Cloud Firestore, a Google-hosted database, under your account. The stored document contains exactly these fields, and nothing else:
id, ownerId, title, body, colorHex, isArchived, deletedAt, reminderId, collaborators, createdAt, updatedAt.
The title and body of your notes are stored on Google's servers in readable form. They are not end-to-end encrypted. They are protected by Firestore security rules that permit a note to be read only by its owner or by someone on its collaborator list, and permit deletion only by its owner. Zeno Canvas operates the project those rules run in, and does not read your notes.
When you share a note, the person you share with is recorded in that note's collaborators list, by account identifier or by verified email address. That means the email address you type in is stored in the note document, and that the collaborator can then read and edit that note's contents. Only the owner can change who is on the list, and only the owner can delete the note.
Google's handling of the data it stores on your behalf is covered by the Google Privacy Policy and the Firebase terms.
4. Permissions
| Permission | Why | What it can see |
|---|---|---|
POST_NOTIFICATIONS | Shows note reminders you set. Requested at the point of use. | Nothing. Decline it and the rest of the app works. |
SCHEDULE_EXACT_ALARM | Times those reminders precisely rather than letting the system batch them. | Nothing. It is a scheduling permission. |
INTERNET | Added to the build by the Google libraries that provide sign-in and sync. It is what makes section 3 possible. | Network access. It is not a runtime permission and Android does not prompt you for it. |
One further entry appears in the installed manifest — com.zenocanvas.pasteit.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION. It is not an Android capability and grants access to nothing: it is a signature-level permission that the AndroidX core library defines against the app's own package, so that broadcast receivers registered at run time cannot be reached by other apps. It is a hardening measure, and Google Play does not show it to you.
There are no others. No location, no camera, no microphone, no contacts, no calendar, no photos, and no storage-wide file access.
5. Advertising
There is none. The app contains no advertising SDK, shows no adverts, has no in-app purchases and no subscription. We do not sell, rent, or trade your data, and there is no advertising identifier in use.
6. Analytics — stated plainly
The Firebase Analytics library is included in the build. The app itself logs no events of its own — there is not one analytics call in the source — but the library collects a baseline automatically once it is present: a randomly generated app-instance identifier, session starts, first opens, and coarse device and country information. That data goes to Google and is visible to us only as aggregate counts.
It carries none of your note content, and it is not linked to your Google account by the app. We are listing it because a policy that claimed "no analytics" while the library sat in the build would be false, and because you are entitled to know what a build actually contains rather than what it intends.
There is no crash-reporting SDK and no attribution or advertising SDK.
7. Children
Paste-It is not directed at children. It requires a Google account for its sharing features, which has its own age requirements set by Google, and it contains no ads and no purchases.
8. Deleting your data
- A single note — delete it, then empty it from Trash with Delete permanently. For a synced note that removes the stored document as well; only the owner can do this.
- Sync, for the future — Settings → Sign out. The app returns to working locally.
- Everything on the device — uninstall the app. Android deletes its private storage with it. Note that uninstalling does not by itself remove notes already synced under your account.
If you want your synced data removed and cannot do it from the app, email us at info@zenocanvas.online from the address on the account and we will delete it.
9. Changes to this policy
If a future version changes what the app sends or stores, this document will be updated before that version ships, and the "Last updated" date will change.
10. Contact
Questions about this policy, or about anything the app does:
Zeno Canvas
Dhaka, Bangladesh
Email: info@zenocanvas.online
Last updated: 10 September 2026