All in One Notes Privacy Policy
Last updated November 7, 2026
Who we are
All in One Notes is made by ajnapps, based in Japan. We give the operator's name and postal address on request. We decide how your data is used. Under Japan's Act on the Protection of Personal Information, that makes us the business operator responsible for it. Contact us at ajnappscontact@gmail.com.
The short version
- Your notes, lists and recurring tasks live on your device first. If you don't sign in, none of it leaves the device.
- If you sign in with Apple or Google, we sync them to a cloud database under your account, so your devices match.
- Settings › Sync › Delete account removes what is synced to your account.
- We don't sell your data, show ads or use it for marketing.
- Analytics and crash reports are not linked to your account and never contain note text, names or emails.
What we collect
On your device. Notes, lists, recurring tasks, task details and your completion history are stored on your device. Signing in is optional.
Your account. If you sign in with Apple or Google, Firebase Authentication stores your account ID and the name and email address that Apple or Google share with the app.
Synced data. While you're signed in, the app syncs these to Google's Cloud Firestore under your account. Other users can't read them.
- notes, lists and recurring tasks;
- task details: due dates, notes and steps;
- your completion history: what was completed and when.
Your devices. While you're signed in, each device records its name, type (iPhone, iPad or Mac), app version and when it was last seen, so the Sync page can list your devices. On a Mac, the name is the computer's name.
Calendar. If you allow it, All in One Notes reads your calendar events on your device to show them with your to-dos. If you turn on recurring-task sync, it adds events to a calendar you choose. Your calendar events are never sent to us.
Crash reports and usage data. In the released app (App Store and TestFlight builds), these are collected. Debug builds report nothing.
- Firebase Crashlytics collects crash reports and error details: device model, operating system version, app version and where in the app the problem happened.
- Firebase Analytics records how the app is used: screens opened, setup steps, sign-ins and sign-outs, notes, lists and recurring tasks added, completed, moved or deleted, calendar events created or deleted, searches (by number of results), how long syncing takes, which settings you change, errors by kind, and your answers to permission requests and tips.
These reports come with Firebase's app-instance ID and basic device information. Google works out your general location, such as your city or country, from your IP address. They never include note text, list or task names, event titles, your name or your email address, and they are not linked to your account.
App settings (Remote Config). When All in One Notes opens, it asks Firebase Remote Config whether an update is required or the app is down for maintenance. The request carries a Firebase installation ID and basic details about the app and device: app version, operating system, language and country. It is not linked to your account.
Sharing and export. If you share a list as text, or use Settings › Share AON, the text goes only to the app you pick in the share sheet, such as Messages, Mail or Files. We don't receive it, and that app's own policy applies.
Siri. If you use Siri or Shortcuts with All in One Notes, Apple handles what you say, and All in One Notes receives the text it needs to add or find a note.
The Local API on a Mac. The Mac app has an optional connection for other programs. It is off until you turn it on in Settings › Local API. While it is on, only programs on this Mac that have All in One Notes's secret key can read and change your notes. It accepts connections from this Mac only, and nothing leaves the Mac.
What we don't collect. We don't use an advertising ID, show ads or track you across other apps. We don't access your location, contacts or photos.
Why we use your data
- To keep your notes on your devices and, if you sign in, in sync between them.
- To show your calendar with your to-dos, and to add recurring tasks to your calendar if you ask.
- To find and fix problems, and to see how the app is used.
- To answer you when you contact us.
We make no decisions about you with legal or similar effect. We don't use your data for advertising or marketing, and we don't sell it or share it for advertising.
If EU or UK data protection laws apply to you: our legal bases are contract (providing the app you asked for), our legitimate interests (crash fixes and usage analytics) and legal obligations.
Who we share it with
These providers process data for us, under terms that limit how they may use it.
- Google Firebase (United States and other countries): sign-in (Firebase Authentication), the cloud database (Cloud Firestore), crash reports (Crashlytics), analytics (Firebase Analytics) and remote settings (Remote Config). Data is encrypted in transit with HTTPS. Firebase privacy
- Google: Google sign-in. Google Privacy Policy
- Apple: distributes the app, provides Sign in with Apple and handles Siri. Apple privacy
We may also disclose data if the law requires it, to protect safety, or in a sale of All in One Notes (we would tell you first).
Where your data goes
We operate from Japan. The providers above are mainly in the United States, and some operate elsewhere. By signing in or allowing analytics you agree to your data going to these countries.
How long we keep it, and deleting it
- We keep synced data until you delete it or your account. We don't delete inactive accounts automatically.
- Deleting a note, list, recurring task or task's details in the app also deletes it from the cloud database. The cloud database keeps the last 60 days of completion history; older entries are deleted from it automatically, and your devices keep the full history.
- Signing out stops syncing. Your notes stay on the device.
- Settings › Sync › Delete account deletes everything synced to your account: notes, recurring tasks, lists, task details, completion history and your devices list, then your sign-in. Your Apple or Google account itself stays.
- If you can't use the app, email us and we will delete your account for you.
What can remain after you delete your account:
- Notes and recurring tasks already on your devices. They stop syncing.
- A record that the account was closed, which holds only the time.
- Google's analytics and crash data, which isn't tied to your account. Google deletes it automatically after a limited time.
- Sign-in logs, including IP addresses, kept by Firebase Authentication for a few weeks.
- We don't keep separate backups of the cloud database. How long Google's own systems keep copies is covered by Firebase privacy and security.
Your rights and choices
You can ask us to tell you what we hold and give you a copy, correct it, delete it, stop using it for a purpose, or withdraw your consent. Email us. We may ask you to confirm it is you; we find your account through the email on your Apple or Google sign-in. We aim to answer within 30 days. If we decline, we will say why and you can appeal by replying. You can also complain to your data protection authority or state attorney general.
EU and UK. If those laws apply, you have the rights above and the right to complain to your supervisory authority.
California. We don't sell or share personal information for advertising. We don't respond to Do Not Track signals, and the app has none.
Japan. You can ask us to disclose, correct or stop using your retained personal data.
Security
The app connects to Firebase over encrypted HTTPS. No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.
Children
All in One Notes is not made for children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact us and we will delete it.
Changes
We will post changes here with a new date. If a change affects how we use your data, we will tell you in the app first, and ask again for your permission where the law requires it.
Contact
ajnappscontact@gmail.com. Postal address on request.