How EdStar Studios AB collects, uses, and protects your information in the EdNotes app.
This Privacy Policy explains how EdStar Studios AB (“EdStar Studios”, “we”, “us”, or “our”) collects, uses, shares, and protects personal data when you use the EdNotes mobile application (the “App”). We are committed to protecting your privacy and handling your data transparently and in accordance with the EU General Data Protection Regulation (GDPR) and applicable Swedish data protection law.
EdStar Studios AB
A limited liability company (aktiebolag) registered in Sweden
Company registration no. (organisationsnummer): 559571-2315
Privacy contact e-mail: edstarstudios@gmail.com
EdStar Studios AB is the data controller responsible for the personal data processed through the App, as described in this policy.
This policy applies to personal data processed through the EdNotes App and its supporting cloud services. It does not apply to third-party services you connect to the App (for example, your Google Account), which are governed by their own privacy policies. Where the App links to or integrates with such services, we identify them in this policy.
What we collect depends above all on whether you sign in. EdNotes can be used entirely on your device, without an account. Here is the short version:
| Without an account | Signed in | |
|---|---|---|
| Your notes, lists and attachments | Stay on your device | Synced to your account |
| Account data (e-mail, name) | Not collected | Collected |
| Sharing data | Not collected — sharing needs an account | Only when you share a note |
| Push-notification token | Not collected | Collected |
| Usage statistics | Not collected at all | Collected — can be switched off under More settings |
| Crash reports | Collected | Collected |
| Subscription data | Collected | Collected |
| Google Calendar & Drive backup | Not available without a Google account | Only if you switch them on |
| Device calendar | Only if you switch it on — stays on your device | Only if you switch it on |
| Link previews | Only when you paste a web link into a note. Your device fetches that page directly; we do not see it. | |
The two rows in bold are the only things collected when you use EdNotes without an account: a crash report if the App fails, and your subscription status. Neither ever contains your notes.
In full, we collect the following categories of personal data, depending on how you use the App:
| Category | What it includes | Source |
|---|---|---|
| Account data | Your e-mail address, display name, profile photo (if provided by your Google account), and a unique account identifier (user ID). | Google Sign-In when you log in. |
| Your content | The notes, checklists, calendar events, reminders, labels, folders, profiles, and any text you create or edit in the App. | You, as you use the App. |
| Attachments | Images you add (from camera or gallery) and audio (voice) recordings you attach to notes. | You, when you add attachments. |
| Sharing data | When you share a note, the recipient's e-mail address, your name and e-mail (shown to recipients), invitation records, and collaboration status. | You, when you invite others. |
| Notification data | A push-notification device token, your device platform, time zone, and language preference, used to deliver reminders and shared-note updates. | Your device and settings. |
| Crash reports | If the App crashes or hits an error, a technical report is sent so we can find and fix it. It contains the app version, your device model and operating system version, and where in the code the failure happened. It never contains your notes, lists, attachments, or any text you have written. Crash reports are sent whether or not you are signed in — including when you keep your notes on the device only. | Automatically collected. |
| Usage statistics | How often the App is opened, how long it is used, and how many actions are performed — so we can see whether the App is used enough to be worth continuing to develop. Recorded per account rather than aggregated, and only for signed-in accounts: if you keep your notes on the device without signing in, no usage statistics are collected at all. Signed-in users can switch usage statistics off under More settings. | Automatically collected. |
| Subscription data | Whether you have an active EdNotes Pro subscription, together with an installation identifier, your device model, operating system version, and country. This is handled by our subscription provider RevenueCat (see section 6) and applies to every installation, including when you use EdNotes without an account. We never receive your card or bank details — the payment is handled entirely by Google Play. | Automatically collected. |
| Google Calendar data optional | Calendar events read from and written to your Google Calendar, if you enable calendar sync. | Google Calendar, with your consent. |
| Backup data optional | A backup file (ednotes-backup.json) stored in your own Google Drive, if you enable Drive backup. |
Created in your Google Drive. |
| Device calendar optional | Events read from or written to your device's local calendar, if you enable that integration. | Your device calendar, with permission. |
| Link preview data | When you add a web link to a note, the App fetches the linked page to show a title/description/thumbnail preview. | The website you linked. |
We process your personal data for the following purposes, each with a legal basis under GDPR Article 6:
| Purpose | Legal basis |
|---|---|
| Providing core App functionality (creating, storing, and syncing your notes, lists, and calendar items across your sessions and devices). | Performance of a contract (Art. 6(1)(b)). |
| Authenticating your account and keeping it secure. | Performance of a contract; legitimate interests (Art. 6(1)(f)). |
| Sending reminders and shared-note update notifications. | Performance of a contract; consent for notifications (Art. 6(1)(a)). |
| Enabling note sharing and collaboration at your request, including sending invitation e-mails. | Performance of a contract. |
| Google Calendar sync, Google Drive backup, and device-calendar integration. | Your consent (Art. 6(1)(a)), which you may withdraw at any time. |
| Diagnosing crashes, maintaining stability, and improving the App. | Legitimate interests (Art. 6(1)(f)). |
| Managing EdNotes Pro subscriptions and unlocking paid features on your devices. | Performance of a contract (Art. 6(1)(b)); legitimate interests in preventing misuse of paid features (Art. 6(1)(f)). |
| Complying with legal obligations and responding to lawful requests. | Legal obligation (Art. 6(1)(c)). |
We do not sell your personal data, and we do not use the content of your notes for advertising or profiling.
The App requests the following Android permissions. Each is used only for the stated feature, and most are optional — the App asks only when you use the related feature:
You can grant or revoke these permissions at any time in your device's system settings.
We use trusted third-party providers to operate the App. These providers process data on our behalf under contractual data-protection obligations:
EdNotes offers optional integrations with your Google Account:
profile) and email to create and secure your account.calendar scope) — to read and write calendar events when you enable calendar sync.drive.file scope) — a per-file scope that lets the App create and access only its own backup file in your Drive. It does not grant access to any other files in your Google Drive.We share personal data only in these limited circumstances:
We never sell your personal data.
Our services are provided using Google Cloud infrastructure. Some processing — including certain server-side functions — takes place on servers located in the United States, and other data may be processed in Google data centres in the EU or elsewhere. When personal data is transferred outside the European Economic Area (EEA), the transfer is protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses and Google's certification under the EU–U.S. Data Privacy Framework. You may contact us for more information about these safeguards.
We take reasonable technical and organisational measures to protect your data, including encryption of data in transit (HTTPS/TLS), authenticated access controls, and server-side security rules that restrict data to its owner and authorised collaborators.
Two features encrypt your content on your device, before it is stored or sent anywhere:
Notes that are not locked, and backups saved without a password, are stored unencrypted at our processor (Google Cloud), which encrypts data at rest with its own keys. That means we are technically able to access them. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard practices.
Under the GDPR, you have the right to:
To exercise any of these rights, contact us at edstarstudios@gmail.com. We will respond within the time limits required by law.
You also have the right to lodge a complaint with your local data protection authority. In Sweden this is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) — www.imy.se.
You can delete individual notes and lists at any time within the App (via Trash). To request deletion of your entire account and all associated personal data, e-mail us at edstarstudios@gmail.com from the address associated with your account, or use any in-app account-deletion option where available. We will delete your data from our active systems, subject to any limited retention required by law.
EdNotes is a general-audience productivity app and is not directed to children under the age of 13 (or the equivalent minimum age in your country). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you within the App. Your continued use of the App after an update means you accept the revised policy.
EdStar Studios AB — registered in Sweden
Privacy enquiries: edstarstudios@gmail.com
Company registration no. (organisationsnummer): 559571-2315