Privacy Policy

ennote /Last updated:September 1, 2026

1. Information We Handle

ennote (the Service) handles account email addresses, Firebase user IDs, usernames, and your name, profile text, and images.

The Service handles the names, readings, nicknames, relationships, gender, occupation, age, birthdays, phone numbers, email addresses, addresses, residence, birthplace, hobbies, characteristics, clothing, personality, preferences, social accounts, notes, dates met, last contact dates, anniversaries, interaction history, gift names, amounts, directions, dates and notes, events, place names, addresses, coordinates, map URLs, images, avatar settings, tags, groups, custom fields, connections between people, and other information that you enter or select. Coordinates are the precise coordinates of places you select and associate with interactions or events. When you use an account, this content is included in cloud sync; the Service does not continuously collect your device location. App settings such as notifications, themes, app lock, and display order are also stored.

For ennote Plus, StoreKit provides product IDs, Apple-signed purchase transaction data, expiration dates, and revocation status for entitlement checks. While signed in, the transaction signature is sent to Firebase to verify Apple’s signature and its association with your user ID; product ID, expiration, environment, and verification time are stored with that user ID. The Service does not collect or store Apple Account payment details. Face ID and Touch ID are processed by the OS on the device; the Service does not receive or store biometric information. Firebase SDKs may process technical information such as IP address, app and installation identifiers, App Check information, operation results, and diagnostic information. Information is collected through your input and selections, the photo picker, map search results, StoreKit, and Firebase SDKs. Without signing in, your input remains on the device.

When you contact us, we handle the sender’s email address, name and other information included in the message or attachments, and the support history. When you access public web pages, Firebase Hosting may process technical information such as IP address, browser and device information, and access time.

2. Purposes of Use

We use information to record, search, and display people, places, events, interactions, and gifts; sync between devices; authenticate accounts; configure and display notifications; verify Plus purchases; provide update notices; respond to inquiries and rights requests; delete data; prevent abuse; troubleshoot; protect rights; and comply with law. Unlinked diagnostic information collected by Firebase SDKs may be used to analyze service quality. We do not analyze user behavior through Firebase Analytics, serve ads, sell data, or track you across other apps or websites. Public web pages do not use cookies for advertising or behavioral analysis.

3. Storage and Sync

Without an account, content is stored in the device’s Application Support and UserDefaults and is not transferred to a new device. When you sign in with a verified account, user content and settings described in Section 1 sync to Firebase Authentication and Cloud Firestore and images are stored in Firebase Storage, regardless of Free or Plus. Cloud Firestore is configured in the Tokyo region. A device cache is also stored for offline display. Passwords are not stored in the app on the device.

4. External Services and Sharing

We use Google’s Firebase Authentication, Cloud Firestore, Firebase Storage, Cloud Functions for Firebase, Firebase Remote Config, Firebase App Check, and Firebase Hosting for authentication, cloud and image storage, sync, account deletion, updates, abuse prevention, and public web delivery. The cloud-sync content and technical information in Section 1 may be processed by Google. Support email and attachments are processed by Gmail. Map searches are processed by Apple Maps. Only when you choose “Open in Google Maps” are place names, addresses, coordinates, and similar information sent to Google Maps. Plus purchases, restores, cancellations, and refunds are processed through Apple and the App Store; the Service does not store Apple Account payment details.

Except where required by law, authorized by you, or necessary for a service provider to provide the Service, we do not provide, sell, or lend personal information to third parties. Google and Apple may process information at overseas locations or through contractors. We confirm through contracts, provider disclosures, or other appropriate methods that providers handling user information offer protection at least equivalent to this policy and applicable law, and we supervise them as needed. See Firebase Privacy (https://firebase.google.com/support/privacy), Google Privacy Policy (https://policies.google.com/privacy), and Apple Privacy Policy (https://www.apple.com/legal/privacy/).

5. Notifications

Event, birthday, and anniversary notifications are local notifications managed by the OS on your device. If you allow notifications, their dates and displayed content may be stored by the device notification system. You can change notification permission in device settings.

6. Your Choices and Rights

You can view, edit, and delete registered information in the app. You can delete device data in Settings. Creating an account is optional, but data will not transfer when you change devices without an account. Photo and notification permissions are optional and can be withdrawn in device settings. You can withdraw consent to cloud handling and request deletion by deleting your account or contacting the address in Section 9.

You may request notice of purposes of use, disclosure, correction, addition, deletion, suspension, erasure, suspension of third-party provision, and disclosure of third-party provision records by contacting Section 9. We generally respond electronically and may ask for information needed to verify identity. If the law prevents us from responding, we will explain why. No fee is charged.

Before registering another person’s personal information or photos, confirm that you have authority, explain the purpose and this policy to that person, and obtain consent where necessary. Requests from a person whose information was registered will be handled through appropriate procedures, including identity verification and confirmation with the registering user.

7. Retention and Deletion

Cloud data is stored until you delete your account. Deleting an account from Settings starts deletion of authentication information, Firestore data, Storage images, and device cache. For retrying a deletion interrupted by a network failure, we retain the Firebase user ID for up to 24 hours and erase it when retry succeeds or the period expires. Inquiry information and support history are retained only as long as needed for legal obligations, abuse prevention, disputes, or rights protection and are deleted when no longer needed. Technical information generated by Firebase, Google, and Apple follows each provider’s retention policy. Except where retention is required by law or needed to prevent abuse or protect rights, deleted information cannot be restored.

8. Security

We use appropriate security measures to prevent unauthorized access, leakage, loss, or damage, including verified email, user-level authentication and access control, App Check, encrypted communications, separated cloud permissions, limited handling, app lock, deletion functions, and provider checks. We will answer requests for details about security measures without delay to the extent that doing so does not harm secure operations. You must also protect your device and account information.

9. Changes and Contact

This policy may change in response to changes in features, external services, or law. The changed content and effective date will be shown on this page or in the Service. Important changes will be announced with reasonable notice, and new consent will be obtained when required.

For questions, disclosure requests, or complaints about personal information: enappsupport@gmail.com

The Operator’s name, address, and representative name where applicable will be disclosed without delay upon request to that email address. The Operator does not belong to an accredited personal information protection organization.