This privacy policy applies to the Angie's Note app for mobile devices, together with any related services operated by Bale K (collectively, the "Application"). Bale K is hereby referred to as the "Service Provider".
Angie's Note is a shared organizer for families, couples, and small teams. You create shared notes, invite members with an invite code, and manage to-dos and calendar events together. Because the Application is collaborative, the content you create is stored on the Service Provider's servers so it can be synchronized with the members you invite.
Information Collection and Use
Account information. To use the Application you create an account with an email address and password, or sign in with Google. The Service Provider stores your email address, an internal account identifier, and the display name you choose.
Content you create. Notes, to-dos, calendar events, assignees, and related settings are stored on the Service Provider's servers (hosted on Supabase) so that they can be shared in real time with members of your notes. Content in a shared note is visible to the other members of that note.
Push notification tokens. If you allow notifications, the Application registers a device push token (Firebase Cloud Messaging) so that members can be notified, for example when a task is assigned to them. Daily summary notifications are generated locally on your device.
Product analytics. The Application records privacy-minimized product events (such as "signed up", "created a note", "accepted an invite") linked to your account identifier. These events do not include note titles, task contents, email addresses, or invite codes.
When you use the Application, certain information may also be collected automatically by the Application or its third-party SDKs, including:
- Your device's Internet Protocol address
- Your device's advertising identifier (Advertising ID)
- The pages of the Application that you visit, the time and date of your visit, the time spent on those pages
- The mobile operating system you use
Advertising
The Application displays advertisements provided by Google AdMob (including banner, interstitial, app open, and native ad formats). To serve ads, AdMob and its partners may access your device's Advertising ID and other information described above. For users in the European Economic Area (EEA), the United Kingdom, and other regions where required, the Application presents a consent form via Google's User Messaging Platform (UMP) before personalized advertising data is used; you may choose non-personalized ads. You can also reset or limit ad personalization through your device's system settings (Settings → Google → Ads).
Premium users do not see advertisements.
For more information on how Google uses data when you use partners' apps, see Google's policy at https://policies.google.com/technologies/partner-sites.
Cookies and Tracking Technologies
The Application or its third-party SDKs may use cookies, SDKs, pixels, and similar technologies to support functionality, analytics, or service delivery. Where required by applicable law, the Service Provider will obtain consent before using non-essential tracking technologies.
Your Rights
You may request access to, correction of, or deletion of your personal data held by the Service Provider. You can delete your account and all associated data at any time in the Application (Settings → Delete account). To exercise these rights by request, or to withdraw consent where processing is based on consent, contact the Service Provider at bloodturtle@naver.com.
Your California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. To exercise your CCPA/CPRA rights, contact the Service Provider at bloodturtle@naver.com.
Third Party Access
Only aggregated, anonymized data is periodically transmitted to external services to aid the Service Provider in improving the Application and their service. The Service Provider may share your information with third parties in the ways that are described in this privacy statement.
The Application utilizes third-party services that have their own Privacy Policy about handling data. Below are the links to the Privacy Policy of the third-party service providers used by the Application:
- Supabase — database, authentication, and hosting
- Google Play Services / Firebase — sign-in and push notifications
- AdMob — advertising
The Service Provider may disclose User Provided and Automatically Collected Information:
- as required by law, such as to comply with a subpoena, or similar legal process;
- when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
- with their trusted services providers who work on their behalf, do not have an independent use of the information the Service Provider discloses to them, and have agreed to adhere to the rules set forth in this privacy statement.
International Data Transfers
The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, the Service Provider will use appropriate mechanisms:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions or other legally recognized transfer mechanisms
- Your consent, where required and legally permitted
Data protection laws in other countries may differ from those in your jurisdiction. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.
Opt-Out Rights
You can stop further collection of information from your mobile device by uninstalling the Application. Uninstalling does not delete data already stored on the Service Provider's servers; to delete that data, use in-app account deletion (Settings → Delete account) or contact the Service Provider at bloodturtle@naver.com.
Data Retention Policy
The Service Provider retains personal data based on its necessity for the stated purposes:
- Account and content data: Retained while your account is active. When you delete your account, your notes, to-dos, events, profile, and push tokens are deleted; your contributions in notes owned by other members are removed from assignments.
- Automatically collected data: Retained for up to 24 months from collection, unless longer retention is required for legal compliance.
- Aggregated and anonymized data: Retained indefinitely as it no longer identifies you.
- Data required for legal compliance: Retained as long as required by applicable law.
Children
The Application is not intended for children under 16 years of age, or such higher age as required by applicable law. The Service Provider does not knowingly solicit data from children or market the Application to them.
Where parental or guardian consent is required under applicable law, the Application is not intended for use without that consent. In the event the Service Provider discovers that a child has provided personal information in violation of applicable law, the Service Provider will immediately delete this from their records. If you are a parent or guardian and you are aware that your child has provided the Service Provider with personal information, please contact the Service Provider (bloodturtle@naver.com) so that they will be able to take the necessary actions.
Security
The Service Provider is concerned about safeguarding the confidentiality of your information. Access to shared content is restricted to members of the same note, enforced at the database level. The Service Provider provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains.
Data Breach Notification
If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, providing information about the nature of the breach and the steps being taken to address it.
Changes
The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with an effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.
Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at bloodturtle@naver.com.
Your Consent
Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action (for example, allowing notifications or accepting the advertising consent form). You may withdraw consent at any time without affecting processing carried out before withdrawal. Processing based on other lawful bases is carried out as described above.
Contact Us
If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at bloodturtle@naver.com.