Privacy Policy

Capsidian ("we", "our", or "the App") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Android application.

1. Data You Provide

• Content you capture: Text, images, audio recordings, and calendar events
• Vault configuration: Your Obsidian vault URI and target folder preferences
• Settings: Your app preferences and feature toggles

All user-generated content is stored locally on your device in your chosen Obsidian vault. We do not have access to this content.

2. Automatically Collected Data

We use Google Firebase to collect anonymized telemetry:

• Analytics data: App usage patterns, feature engagement, screen views
• Crash reports: Technical stack traces and diagnostic data about app crashes to improve stability
• Performance metrics: App responsiveness, startup duration, and rendering frame rates
• Device information: Device model, Android OS version, and Capsidian app build version

This data is completely anonymized and helps us debug issues and improve the App.

3. Permissions Data

The App requests standard Android runtime permissions:

• Camera: Used only when you choose to capture images for OCR text extraction
• Microphone: Used only when you record voice notes
• Storage / Storage Access Framework: To read and write Markdown notes in your Obsidian vault
• Calendar: To import calendar events (only if you choose to enable this feature)
• Internet: For extracting YouTube transcripts and sending Firebase stability reports

Data from these permissions is processed locally and never transmitted to our servers.

We use collected technical information solely to:

• Provide core App functionality (OCR text recognition, speech-to-text, note generation)
• Improve App stability, memory performance, and user experience
• Analyze feature usage to prioritize roadmap developments
• Diagnose crashes and resolve technical bugs across device models
• Monitor and prevent abusive access to public endpoints
• Comply with applicable legal obligations

Local Storage

• All notes, recordings, and captured content are stored locally in your Obsidian vault
• App preferences and settings are stored in encrypted DataStore on your local device
• OCR and Android speech-to-text processing happens on-device using Google ML Kit
• We do not operate servers that store, host, or sync your vault notes

Cloud Services

We use trusted third-party infrastructure providers:

• Google Firebase (Analytics, Crashlytics, Performance): Hosted in Google Cloud infrastructure under enterprise data protection terms
• Google ML Kit: Downloads on-device models to perform speech and OCR inference locally

We do not sell, trade, or rent your personal information. We may share data strictly with:

• Service providers: Google (Firebase services) under strict confidentiality and data protection agreements
• Legal requirements: If required by court order, law, or to protect the rights and safety of users

Your notes and vault content are never shared with third parties under any circumstances.

You maintain full agency over your data:

• Access: Review what technical crash data is collected by contacting us
• Delete: Uninstalling the App removes all app-specific caches and preferences
• Data portability: Your notes are plain Markdown (.md) files residing in your Obsidian vault, instantly readable by any text editor
• Revoke permissions: Revoke Camera, Microphone, or Storage permissions at any time in Android Settings

Capsidian is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child under 13, please contact us immediately to have it purged.

• Local vault data: Retained indefinitely on your device until you manually edit or delete notes
• Analytics data: Retained by Google Firebase according to their standard retention policy (typically 14 months)
• Crash reports: Retained by Firebase Crashlytics for up to 90 days for debugging

We implement proactive technical safeguards including:

• Encrypted Android DataStore for app configurations
• Strict zero-transmission policy for vault content over network connections
• On-device machine learning inference for sensitive operations (OCR and voice transcription)
• Regular dependency audits, patch updates, and modern Android security practices

However, no electronic storage system or physical device is 100% impenetrable. You remain responsible for maintaining the physical and OS security of your device and backups.

Firebase diagnostic services may process anonymized telemetry in Google data centers outside your country of residence. Google complies with established international data transfer frameworks. Your actual vault content never leaves your device.

The App may contain links to third-party services (such as YouTube videos or Obsidian documentation). We are not responsible for the privacy policies or practices of third-party platforms. We recommend reviewing their independent privacy statements.

We may update this Privacy Policy from time to time to reflect operational or legal updates. When changes occur, we will notify users through:

• In-app release notes and notification badges
• Updated "Last Updated" timestamp at the top of this document
• Prompts to review the updated policy on app launches following major revisions

Continued use of Capsidian following updates signifies your acceptance of the revised policy.

Under the California Consumer Privacy Act (CCPA), California residents have specific privacy rights:

• Right to Know: Request disclosure of categories and specific pieces of personal information collected
• Right to Deletion: Request deletion of collected personal data
• Right to Opt-Out of Sale: We do not sell personal information and have never sold consumer data
• Right to Non-Discrimination: Exercising CCPA rights will never affect service availability or app features

For users located within the European Economic Area (EEA) and the United Kingdom:

• Legal Basis: We process data based on your explicit consent and our legitimate interest in providing stable software
• Data Controller: The developer of Capsidian
• Right to Lodge a Complaint: You have the right to lodge a complaint with your national Data Protection Authority
• Data Protection Officer: Contact our designated privacy contact via the email below

For inquiries regarding this Privacy Policy, or to exercise any of your statutory privacy rights, please reach out to us:

By using Capsidian, you consent to this Privacy Policy and agree to our collection and use of technical diagnostic information as outlined herein.