Thanknote Privacy Policy

For the Android app Thanknote (gratitude journal), package app.thanknote.gratitude.journal.
Effective 25 October 2026. Published by Morocode LLC.

Who we are

Morocode LLC, a limited liability company registered in Wyoming, United States, publishes Thanknote on Google Play. Our registered address is 30 N Gould St Ste R, Sheridan, WY 82801, United States. You can reach us at support@morocode.com about anything in this policy.

What the app holds, and where

Thanknote stores the following on your device, in storage that belongs to the app and that other apps cannot read:

• What you write. The lines on each day's page, the mood you tap, and the lines you keep.
• Photos you attach, copied into the app's own folder on your phone.
• Your own settings: the reminder time, the theme and the screen lock.

All of it stays on the phone. It is not transmitted, and we have no way to see it.

Your journal is yours

• Everything you write stays in Thanknote's own database on your phone.
• Nothing you write is ever uploaded. Not a line, not a mood, not a photo. The only thing Thanknote transmits is described under What the app sends to Google below. Your entries go nowhere, neither to us or to anyone else, and nothing you write is ever read by a person or a machine other than you.
• A photo you attach is copied into the app's private folder and deleted with the entry. It is not in the backup file and it never reaches your gallery unless you put it there.
• Android's cloud backup and phone-to-phone transfer are switched off for this app. To move your journal to a new phone you export a backup file yourself and decide where it goes.

What the app sends to Google

Thanknote includes two Google services, and they are the only things it reports about itself:

• Crashlytics — when the app crashes or freezes, it sends Google a report describing where in our code it went wrong, along with the device model, the Android version, the app version and how much memory and storage were free. We read these to fix the bug. They never contain what you typed.
• Google Analytics for Firebase — counts of things like the app being opened, a screen being viewed, or a feature being used, together with the device model, language, country (worked out from the network, not from GPS — the app has no location permission), app version and a randomly generated installation identifier. It tells us how many people use the app and which parts they use.

What is never included: a single word you wrote, any mood you tapped, or any photo you attached. The events are counts and names of features, not your records.

The installation identifier is a random number created when you install the app. It is not your phone's serial number, not your advertising ID and not anything that identifies you as a person. It is reset if you clear the app's data or reinstall it.

These reports are processed by Google on our behalf under Firebase's data-processing terms and Google's Privacy Policy. We can see totals and charts. We cannot see an individual person.

Turning it off. Android's own Settings › Google › Ads lets you opt out of personalised advertising, and Settings › Google › Usage & diagnostics governs what Google collects from your device generally.

Google Play

The app is distributed through Google Play, and two things there involve Google rather than us:

• Crash and performance reports. Google Play collects these from Android devices for every app, under your own Android and Google account settings, not ours. They tell us how often the app crashed. They contain no content from inside the app.
• The review prompt. When the app offers you Google Play's rating sheet, that sheet is Google's, and anything you write in it goes to Google Play, not to us.

Both are governed by Google's Privacy Policy.

Permissions, and why

• Notifications to show the daily reminder to write, if you switch it on.
• Camera only at the moment you choose to take a photo for an entry. The app never opens the camera on its own.
• Start at boot so a daily reminder survives a restart.
• Biometrics only to unlock the app, if you turn the journal lock on. Your fingerprint never leaves the phone's own secure hardware and is never seen by the app.

Android asks you for the sensitive ones, and you can withdraw any of them at any time in your phone's settings. The app keeps working with whatever you allow.

Files you create yourself

When you export or back up from inside the app, the file is written wherever you choose, using Android's own file picker. From that moment the file is an ordinary document under your control, and anything you do with it, such as putting it in a cloud drive or sending it to someone, is outside the app and outside this policy.

Keeping and deleting your data

Your data stays until you remove it. You can delete individual entries or clear everything from inside the app, and uninstalling Thanknote removes its database and settings from the phone. Because nothing is ever uploaded, there is no copy anywhere else for us to delete on request.

Children

Thanknote is a general-purpose tool and is not directed at children under 13. We do not knowingly collect anything from anyone, of any age, since we collect nothing at all.

Your rights

Privacy laws such as the GDPR and the CCPA give you rights of access, correction, deletion and portability over personal data held by a company. We hold none: your data never leaves your device, so you already have complete and direct access to all of it, you can correct or delete any of it in the app, and the export feature gives you a portable copy. There is no request to make of us, and nothing we could disclose about you even if we were compelled to.

Changes to this policy

If the app ever starts handling data differently, this page will be updated before that version is released, and the effective date at the top will change. Material changes will also be described in the Google Play release notes.

Contact

Questions about this policy: support@morocode.com.
Morocode LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States