Privacy Policy
Last updated: 5 May 2026
This privacy policy applies to the StickyHover Android application (package com.simplestickynotes.app, hereafter "the app"), published by JK Codes.
What data does the app handle?
The app stores the following on your device only:
| Data | Where it's stored | Who can see it |
|---|---|---|
| Note titles, body text, colours, fonts, gradient settings | Local Room database in the app's private storage | Only you, on this phone |
| Image attachments (when you add a photo to a note) | Local files in the app's private filesDir/note_images/ directory | Only you, on this phone |
| Tag names and tag-to-note links | Local Room database | Only you, on this phone |
| Reminder schedules | Local Room database + Android AlarmManager | Only you, on this phone |
| Per-app context rules | Local Room database | Only you, on this phone |
| Pro entitlement state | Local SharedPreferences after Google Play verifies your purchase | Only you, on this phone |
We do not collect: location, contacts, call logs, SMS, your phone number, IMEI, advertising ID, device fingerprint, browsing history, accounts other than Google Play (and only your purchase token, handled by Google), microphone audio, or analytics of any kind.
Network usage
The app makes network requests only in these cases:
- Google Play Billing — when you purchase or restore the Pro upgrade. The purchase token is handled by Google Play; we never see your payment details.
- First-time ML Kit OCR model download — when you first use the OCR feature, Google's ML Kit library downloads the on-device text-recognition model. After that, OCR runs offline.
- Google Play Auto Backup — Android's OS-level backup mechanism uploads the app's data folder to your own Google Drive at most once per day, when the phone is on Wi-Fi, charging, and idle. This is an Android system feature; we don't initiate it. We don't have access to the backup. Disable from
Settings → Google → Backup.
We do not use any analytics SDK, crash reporter, ad network, attribution provider, or push-notification service.
Permissions explained in plain English
| Permission | Why it's needed |
|---|---|
SYSTEM_ALERT_WINDOW (Display over other apps) | To show a sticky note that floats on top of other apps. Optional — the app works without it, you just can't float notes. |
PACKAGE_USAGE_STATS (Usage access) | Pro per-app-context only. The app reads only the foreground app's package name; never window content, never input you type. |
FOREGROUND_SERVICE_MEDIA_PROJECTION | Required only when you trigger an OCR capture. The system shows you the standard "Start recording or casting?" consent dialog before each capture. The captured image is processed entirely on-device and immediately discarded. |
POST_NOTIFICATIONS | To show your reminders at the time you set. |
READ_PHONE_STATE | Pro Call Notes only. Reads only whether a call is currently active or ringing — never the phone number, call log, contacts, SIM info, or audio. |
RECEIVE_BOOT_COMPLETED | To re-arm pending reminders after a reboot. Also lets the call-state listener resume so Call Notes works without the user having to open the app first. |
BILLING | Standard Android permission for Google Play in-app purchases (Pro upgrade). |
QUERY_ALL_PACKAGES | Used only to populate the in-app picker for per-app-context. The list of installed apps stays on your device. |
CAMERA (via Document Scanner) | The handwriting scan feature uses Google's bundled Document Scanner, which runs in the Google Play Services process and handles camera access itself. No CAMERA permission is declared by StickyHover; the photo never reaches the app's process at all. |
Voice-to-text dictation
When you tap the microphone button, the app sends a standard RecognizerIntent to your phone's installed speech-recognition service (typically Google's). Your audio goes to that service, not to us. We receive only the transcribed text once you finish speaking, and we put it into the new note. Your audio is never recorded by the app, never stored on disk, and never sent anywhere by us.
OCR (optical character recognition) and camera scan
Both the screen-OCR bubble (Pro) and the handwriting scan (free) use Google's ML Kit Text Recognition library running entirely on-device. After the first one-time model download, the OCR model is local. The image is processed in memory, the recognised text is inserted into a new note, and the image is discarded. The image is not stored, uploaded, or shared.
Data sharing
We do not share any data with third parties. The app makes no network requests for the purpose of sending your data anywhere.
Data retention and deletion
All your data is stored on your device. To delete it: uninstall the app from Settings → Apps → StickyHover → Uninstall. Uninstalling removes everything. If Google Auto Backup created a backup in your Google Drive, you can delete it from drive.google.com → Storage → Backups → StickyHover.
Children
The app is intended for users aged 13 and over. It is not directed at children. We do not knowingly collect any data from children.
Your rights under India's Digital Personal Data Protection Act, 2023 (DPDP Act)
If you are in India, you have the following rights with respect to any personal data we process:
- Right of access — to know what personal data we hold about you. Since we do not collect any personal data, the answer is: none.
- Right of correction and erasure — since we hold no data, there is nothing to correct or erase. Your in-app data is on your device and you can edit or delete it directly.
- Right of grievance redressal — to raise a complaint about the handling of your personal data, email us at the address in the Contact section below. We aim to respond within seven (7) calendar days.
- Right to nominate — you may nominate another person to exercise these rights on your behalf in case of incapacity or death.
Grievance Officer: contactable at info@stickyhover.app. Aim to respond within seven (7) calendar days.
Your rights under the EU GDPR / UK GDPR
The legal basis on which the app processes any data is performance of a contract (you agreed to use the app, and the app needs to function on your phone). Since no personal data is collected or transmitted by us:
- Access, rectification, erasure, restriction of processing, portability — exercisable directly by you on your phone (edit and delete in the app, or uninstall).
- Object — you may object by uninstalling the app.
- Lodge a complaint with a supervisory authority — you may complain to your local Data Protection Authority.
Changes to this policy
We will update the "Last updated" date at the top whenever this policy changes. Material changes will also be announced in the app's release notes on Google Play.
Contact
For any privacy-related question, email info@stickyhover.app. Replies typically within 7 days.