Privacy Policy for BambooNode

1. Introduction

BambooNode ("we", "us", or "our") is a note-taking and file management application developed for Android devices. This Privacy Policy explains how we collect, use, and protect your personal information when you use our application.

We are committed to protecting your privacy and ensuring the security of your data. This policy applies to all users of BambooNode.

2. What Information Do We Collect?

BambooNode is designed to be a privacy-focused application. We do not collect any personal information from you without your explicit knowledge and consent.

2.1 Local Data

All notes and files you create or import using BambooNode are stored locally on your device. This includes:

• Text content of your notes
• Images and attachments you add to notes
• File metadata (names, sizes, modification dates)
• Tag information for organizing notes
• Application settings and preferences

This data is stored in your device's storage (Downloads folder or other selected location) and is never transmitted to our servers.

2.2 Optional Git Sync Data

If you enable the optional Git synchronization feature, your notes and files may be uploaded to a remote Git repository that you configure. This is done at your sole discretion and requires you to provide:

• Remote repository URL
• Authentication credentials (username/password or access token)

Your Git credentials are stored locally on your device using Android's secure preferences and are never transmitted to our servers.

2.3 Device Information (For Troubleshooting)

When you use the feedback feature, you may optionally provide device information to help us troubleshoot issues. This may include:

• Android version
• Device model
• Application version

This information is only sent when you explicitly submit feedback and is used solely for improving the application.

2.4 Crash Report Data (Firebase Crashlytics)

To help us identify and fix application crashes and improve stability, BambooNode uses Firebase Crashlytics, a service provided by Google LLC. When the application crashes or encounters a non-fatal error, Crashlytics automatically collects and transmits the following technical data:

• Crash stack traces and exception details
• Device model and Android operating system version
• Application version and build identifier
• Anonymous, randomly generated installation identifiers (reset on app reinstall)
• Breadcrumb logs of in-app events immediately preceding the crash (if Google Analytics is enabled)

This data is anonymous and does not identify you personally. It is transmitted over an encrypted connection to Google's servers and is used solely to diagnose and resolve application defects. Crashlytics does not collect the content of your notes or files. Google's use of the data is governed by Google's Privacy Policy. You can prevent crash report collection by disabling the app's internet access, though this will also disable the Git synchronization feature.

3. How Do We Use Your Information?

We use your information only for the following purposes:

• To provide and maintain the core functionality of BambooNode
• To enable local storage and management of your notes and files
• To facilitate optional Git synchronization (if enabled)
• To improve the application based on feedback (if provided)
• To ensure the security and integrity of your data

4. Data Storage and Security

4.1 Local Storage

Your notes and files are stored locally on your Android device. You can choose the storage location (e.g., Downloads folder) during initial setup.

4.2 Security Measures

We implement reasonable security measures to protect your data, including:

• Secure storage of Git credentials using Android's encrypted preferences
• File operations using Android's Storage Access Framework (SAF) for secure file management
• Regular updates to address security vulnerabilities

However, no method of storage is completely secure. We cannot guarantee the absolute security of your data.

5. Data Sharing

We do not share, sell, or rent your personal information to third parties for any purpose.

We use the following service providers to deliver core functionality. Each operates as a separate data controller/processor for the limited data described:

• Google Firebase Crashlytics (Google LLC): Processes anonymous crash reports to help us diagnose and fix application defects. See Google's Privacy Policy.
• Git remote repository providers (when you enable synchronization): Your notes and files are transmitted to the remote Git repository you specify. We have no control over how third-party Git providers handle your data.

6. Permissions

BambooNode requires the following permissions to function:

• INTERNET: Required for Git synchronization, feedback features, and transmitting anonymous crash reports via Firebase Crashlytics
• READ_EXTERNAL_STORAGE: Required to read notes and files from your device
• WRITE_EXTERNAL_STORAGE: Required to save notes and files to your device
• MANAGE_EXTERNAL_STORAGE: Required for full access to external storage on Android 11+

All permissions are requested at runtime, and you can revoke them at any time through your device settings. However, revoking certain permissions may affect the functionality of the application.

7. Your Rights

You have the following rights regarding your data:

• Access: You can access all your notes and files directly through the application
• Modify: You can edit, rename, or delete your notes and files at any time
• Export: Your notes are stored as standard Markdown (.md) or text (.txt) files, which you can export using any file manager
• Delete: You can delete all your data by uninstalling the application and removing the files from your device

8. EU General Data Protection Regulation (GDPR) Compliance

BambooNode complies with the EU General Data Protection Regulation (GDPR) for users within the European Union and European Economic Area (EEA).

8.1 Data Controller

BambooNode acts as the data controller for any personal data processed through the application. The data controller is responsible for ensuring that your personal data is processed in accordance with the GDPR.

8.2 Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you explicitly provide device information for troubleshooting via the feedback feature
• Contractual Necessity: When you use Git synchronization, we process the necessary data to provide the service you requested
• Legitimate Interests: We may process anonymous usage data to improve application stability and user experience

8.3 Data Retention

Your local data (notes, files, settings) is retained on your device until you choose to delete them or uninstall the application. Feedback data, if provided, is retained only for the time necessary to resolve the reported issue and is then deleted.

8.4 International Data Transfers

If you enable Git synchronization, your data may be transferred to servers located outside the EU/EEA. We are not responsible for the data handling practices of third-party Git providers. Please review the privacy policy of your chosen Git provider before enabling synchronization.

8.5 Additional EU/EEA User Rights

In addition to the rights listed in Section 7, EU/EEA users have the following rights under GDPR:

• Right to Rectification: You can request correction of inaccurate personal data
• Right to Erasure ("Right to be Forgotten"): You can request deletion of your personal data
• Right to Restriction of Processing: You can request that we limit the processing of your personal data
• Right to Data Portability: You can receive your personal data in a structured, machine-readable format
• Right to Object: You can object to the processing of your personal data based on legitimate interests
• Right to Withdraw Consent: You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal

To exercise these rights, please contact us at weijaky@gmail.com. We will respond to your request within 30 days as required by GDPR.

8.6 Supervisory Authority

If you believe that our processing of your personal data infringes GDPR, you have the right to lodge a complaint with your local supervisory authority or with the supervisory authority where you reside.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

Your continued use of BambooNode after any changes to this policy constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

Email: weijaky@gmail.com

GitHub: https://github.com/weijaky/BambooNode