Privacy Policy

The short version

PocketDrop does not upload app content or contact online services during normal app operation. There is no PocketDrop account, no PocketDrop server, no cloud sync, no first-party analytics, no advertising, and no third-party SDK that reports on your use of the app.

These statements concern app-generated content: notes, photos, recordings, tags, settings, and similar data remain in the app's private storage and are not uploaded to me. They do not mean that the developer receives nothing in every context. If you choose a website or support link, Android may open your browser or email app outside PocketDrop; those services have their own practices.

What the app handles, and where it stays

All of the following is app-generated content created by you and stored in PocketDrop's private storage on your Android device:

• Note content — text bodies, titles, and captions
• Photos you capture in the app or choose from your library; imported, library, and shared images are copied into PocketDrop, while their originals remain outside PocketDrop
• Audio recordings you make in the app
• Tags you create or select
• Settings and preferences — default expiry, retention, and similar

This information is held in a database and in media files inside the application's private storage area, which Android isolates from other apps. PocketDrop does not upload this app content to the developer. Media files are named with generated identifiers, never with your note titles or content.

Device backups

PocketDrop's storage is deliberately excluded from Android backups, so your notes do not travel to a cloud backup service through the app's automatic backup configuration:

• Android — automatic backup is disabled for the application with android:allowBackup="false".

One consequence worth knowing: if you lose the device or move to a new one, your PocketDrop notes will not come with you. That is the intended trade-off.

Permissions

Each permission is requested at the moment you first use the feature that needs it, never on launch. If you decline one, the rest of the app keeps working. Notification permission is never requested, because this version does not send notifications.

Other permissions Android lists

Android shows every permission an app declares, including technical ones that never touch your data. For completeness, PocketDrop also declares:

• Internet — declared automatically by the app framework. PocketDrop does not use it for app services: it does not upload app content or contact online services during normal app operation, and you can test its local features in airplane mode.
• Foreground service / media playback — lets an in-progress voice recording or playback continue reliably while the app is open.
• Modify audio settings, vibrate — audio routing and haptic feedback during recording and playback.
• Read/write external storage — used only on Android 12 and older, where selecting an existing image required it. Newer versions use the modern photo picker instead.

These permissions do not cause PocketDrop to upload app content or send it to the developer.

Deletion and retention

PocketDrop is built around deleting things. You control the schedule:

• Each note has a "Keep for" value you set when you create it. When it elapses, the note moves to Archive.
• Archived notes are permanently deleted after a retention period — 30 days by default. You can change this globally in Settings, override it for an individual note, or set it to keep archived notes forever.
• Notes marked Permanent never expire on their own.
• Settings → Delete everything removes all notes, media, the database, your preferences, and local diagnostic state. It requires typing DELETE to confirm and cannot be undone.

When content is deleted, the underlying records and media files are removed from the app's storage. Note that ordinary file deletion is not a forensic wipe — see section 07.

Content shared into PocketDrop

You can import an image from your library or share one into PocketDrop from another app. In either case, PocketDrop writes a copy into its private storage and follows the same rules as anything else you capture; the original remains in the source library or app outside PocketDrop. PocketDrop does not send anything back to the originating app, and has no share-out or export feature in this version.

What this policy does not promise

I would rather be plain about the limits than let you assume something that is not true.

PocketDrop is designed to stop app content from going somewhere through the app — a cloud, an app service, or an automatic backup. It is not designed to stop somebody holding your unlocked phone or copies kept elsewhere.

Children

PocketDrop is a general-purpose utility and is not directed at children. The app does not upload or collect app-generated content, including content created by a child. Information voluntarily sent to support is handled as described below.

Website and support correspondence

App-generated content stays on your Android device and is not transmitted to the developer by PocketDrop. That is separate from information you choose to send outside the app:

• Support email — when you email support@jrpalacios.dev, the developer receives your sender address, message, and any device or app details you voluntarily include. This information is used only to respond to or provide support, shared only with email delivery or storage providers needed to handle the correspondence, and retained only as reasonably needed for support or legal needs. You may request access to or deletion of support correspondence by emailing the same address.
• GitHub Pages hosting — these pages are hosted by GitHub Pages. GitHub says Pages may log visitor IP addresses for security; see its Pages data-collection information and privacy statement.
• Site measurement and advertising — the developer does not use first-party site analytics or advertising on these pages.

Your rights

Under the GDPR and similar regimes, rights of access, rectification, erasure, and portability apply to personal data held by a controller. PocketDrop does not transmit app-generated content to the developer, so I cannot access, correct, export, or erase that content on your behalf; use the controls in the app or on your device instead. I may hold personal data in support correspondence, and GitHub Pages may process visitor IP addresses as described in section 09.

You can request access to or deletion of support correspondence by emailing support@jrpalacios.dev. You have direct control over app-generated content on your own device: edit or delete any note at any time, or use Settings → Delete everything to remove all of it at once.

Changes to this policy

If a future version of PocketDrop changes how it handles information, this policy will be updated before that version ships, and the "last updated" date above will change. Material changes will also be noted in the app's release notes.

Contact

Questions about this policy or about PocketDrop's handling of your data: support@jrpalacios.dev