This Privacy Policy provides our policies and procedures for collecting, using, and disclosing your information. Users access the ColorNote service (“Service”) through the application, through APIs, and through third-parties. A “Device” is any computer used to access the ColorNote Service, including without limitation a desktop, laptop, mobile phone, tablet, or other consumer electronic device. This Privacy Policy governs your access of the ColorNote Service, regardless of how you access it, and by using our Service you consent to the collection, transfer, processing, storage, disclosure and other uses described in this Privacy Policy. All of the different forms of data, content, and information described below are collectively referred to as “information.”


1. The Information We Collect And Store

We may collect and store the following information when running the ColorNote Service:

Information You Provide. When you register for an account, we collect some Personal Information, such as your name and email address. You may also ask us to import your contacts by giving us access to your third party services (for example, your email account) or to use your social networking information if you give us access to your account on social network connection services. You may also provide us with your contacts’ email addresses when sharing folders or files with them. We may also receive Personal Information (for example, your email address) through other users, for example if they have tried to share something with you.

Your Data. We collect and store data you upload, download, or access with the Service (“Data”).

Log Data. When you use the Service, we automatically record information from your Device, its software, and your activity using the Service. This may include the Device’s Internet Protocol (“IP”) address, information you search for through the Service, locale preferences, identification numbers associated with your Devices, your mobile carrier, date and time stamps, system configuration information, and other interactions with the Service.

Cookies. We also use “cookies” to collect information and improve our Service. A cookie is a small data file that we transfer to your Device. We may use “persistent cookies” to save your registration ID and login password for future logins to the Service. We may use “session ID cookies” to enable certain features of the Service, to better understand how you interact with the Service and to monitor aggregate usage and web traffic routing on the Service. You can instruct your browser, by changing its options, to stop accepting cookies or to prompt you before accepting a cookie from the websites you visit. If you do not accept cookies, however, you may not be able to use all aspects of the Service.


2. How We Use Personal Information And Why

Personal Information. In the course of using the Service, we may collect personal information that can be used to contact or identify you (“Personal Information”). Personal Information is or may be used: (i) to provide and improve our Service, (ii) to administer your use of the Service, (iii) to better understand your needs and interests, (iv) to personalize and improve your experience, and (v) to provide or offer software updates and product announcements. If we communicate with you, and you no longer wish to receive communications from us, please follow the “unsubscribe” instructions provided in any of those communications, or update your settings information.

Geo-Location Information.  Some Devices allow applications to access real-time location-based information (for example, GPS). Our mobile application does not collect such information from your mobile device at any time while you download or use our mobile apps as of the date this policy went into effect, but may do so in the future with your consent to improve our Service.

Analytics. We also collect some information (ourselves or using third party services) using logging and cookies, such as IP address, which can sometimes be correlated with personal information. We use this information for the above purposes and to monitor and analyze use of the Service, for the Service’s technical administration, to increase our Service’s functionality and user-friendliness, and to verify users have the authorization needed for the Service to process their requests.

Your Data. You have control over who sees the Data you uploaded, downloaded or access with the Service. We cannot view it unless you expressly give us permission or it’s necessary to comply with our legal obligations. Specifically: To help refine or improve the technology, we may ask you for permission to review portions of your Data. Also if you contact our Customer Support team for help with specific pieces of Data in your account (for example, if you can’t find a note you believe should be in your account), we may ask for your temporary permission to look at your Data. This permission terminates when the issue is resolve.

Where we need to process your personal information either to comply with law, or to perform the terms of a contract we have with you and you fail to provide that information when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with the functionalities of the Services). In this case, we may have to stop you using our Services.


3. Information Sharing and Disclosure

Use. We do not sell your personal information to third parties. We may share or disclose your information with your consent, for example if you use a third party application to access your account (see below). Through certain features of the Service, you may also have the ability to make some of your information public.

Service Providers, Business Partners and Others. We use certain trusted third party companies and individuals to help us provide, analyze, and improve the Service (including but not limited to data storage, maintenance services, database management, analytics, and improvement of the Service’s features). These third parties may have access to your information only for purposes of performing these tasks on our behalf and under obligations similar to those in this Privacy Policy. You can view the third parties we use to help us provide our Service in Appendix 1.

Third-Party Applications. We may share your information with a third party application with your consent, for example when you choose to access our Service through such an application. We are not responsible for what those parties do with your information, so you should make sure you trust the application and that it has a privacy policy acceptable to you.

Compliance with Laws and Law Enforcement Requests; Protection of ColorNote’s Rights.   We may disclose to parties outside ColorNote Data and information about you that we collect when we have a good faith belief that disclosure is reasonably necessary to (a) comply with a law, regulation or compulsory legal request; (b) protect the safety of any person from death or serious bodily injury; (c) prevent fraud or abuse of ColorNote or its users; or (d) to protect ColorNote’s property rights.

Business Transfers. If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction, but we will notify you (for example, via email and/or a prominent notice on our website) of any change in control or use of your Personal Information or Data, or if either become subject to a different Privacy Policy. We will also notify you of choices you may have regarding the information.

Non-Private or Non-Personal Information. We may disclose your non-private, aggregated, or otherwise non-personal information, such as usage statistics of our Service.


4. Your Rights Relating To Your Information

You can contact us at to ask us to provide access to, correct, update, or delete your personal information. We may ask you for proof of account ownership and/or identity before fulfilling your request. This is a security measure to ensure that your information is not disclosed to any person who has no right to receive it.  In some cases we may retain copies of your information if required by law. Please note that some or all of your personal information may be required in order for us to provide you with access to the certain specific functionalities of our Service.

For Residents in the EU

The General Data Protection Regulation (also known as GDPR) provides you with additional rights regarding your personal information. If you are within the EU, you have the right to:

Request access to your personal information. This enables you to receive a copy of the information we hold about you and to check that we are lawfully processing it.

Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.

Request erasure of your personal information. This enables you to ask us to delete or remove information where there is no good reason for us continuing to process it.

Object to processing of your personal information. This right exists where we are relying on a legitimate interest as the legal basis for our processing and there is something about your particular situation, which makes you want to object to processing of your information on this ground. You also have the right to object where we are processing your information for direct marketing purposes.

Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of your information, for example if you want us to establish its accuracy or the reason for processing it.

Request the transfer of your personal information. We will provide to you your personal information in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

Withdraw consent. This right only exists where we are relying on consent to process your information (“Consent Withdrawal”). If you withdraw your consent, we may not be able to provide you with access to the certain specific functionalities of our Service. We will advise you if this is the case at the time you withdraw your consent.

If you want to exercise any of the rights described above or submit a complaint regarding this Privacy Policy, please send an email to  with “GDPR Request” in the subject line. In the email please describe, with specificity, the GDPR right you are requesting assistance with. If you feel that your complaint has not been adequately resolved, please note that the GDPR gives you the right to contact your local data protection supervisory authority.

For Residents of California

The California Consumer Privacy Act (also known as CCPA) provides you with additional rights regarding your personal information. If you are a California resident, these terms and conditions apply to you.

In the preceding 12 months, we may have collected from you or from your use of the services, categories of personal information as defined under the CCPA, which includes the following:

Identifiers such as your name, email address, IP address, unique device identifiers, advertising identifiers, online identifier, and other similar identifier;

Protected Classifications, such as your gender and age

Commercial information such as your payment method and related information if you purchase a subscription;

Internet or other electronic network activity information, including the name of your mobile operator, your brows type, language and time zone.

Interaction with our software or apps such as usage data, type and version of operating system, hardware version, device settings, software types, battery and signal strength, screen resolution, device manufacturer and model, language, and Internet browser type and version;

In the preceding 12 months, we may have used and disclosed personal information for the business and commercial purposes.

If you are a California resident, you have the right to:

Access specific pieces of personal information we have collected about you in the last 12 months.

Request to know the categories of personal information we have collected about you and the purposes for doing so; the categories of sources of that data; the categories of third parties with whom we shared it for a business purpose and our purposes for doing so.

Request deletion of your personal information.

Opt out of sales of personal information. To opt out of receiving interest-based advertising, you can exercise your choice by using your settings.

Receive equal service and not be discriminated against even if you exercise any of your CCPA rights.


5. How Long We Store Your Information

We will retain your information for as long as your account is active or as needed to provide you services. We may retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Consistent with these requirements, we will try to delete your information quickly upon request. Please note, however, that there might be latency in deleting information from our servers and backed-up versions might exist after deletion. In addition, we do not delete from our servers files that you have in common with other users.


6. Where We Store Your Information

If you register for an account and sync your device with our Service, your Information (including but not limited your Data), will be stored on servers hosted by Google Cloud Platform or Amazon Web Service. For information regarding Google Cloud Platform Data Processing and Security Terms, please visit For information regarding Amazon Web Service, please visit

For Residents in the EU

If you are a resident of the European Economic Area (“EEA”) or Switzerland, please note that Google’s certification under the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks includes Google Cloud Platform. Google has also gained confirmation of compliance from European Data Protection Authorities for their model contract clauses, affirming that their current contractual commitments for Google Cloud Platform fully meet the requirements under the Data Protection Directive to legally frame transfers of personal data from the EU to the rest of the world. Meanwhile, Amazon Web Service offers customers a Data Processing Addendum, including Model Clauses (Data Processing Addendum) that was approved in 2015 by the EU data protection authorities, known as the Article 29 Working Party. This Data Processing Addendum enables customers, when using AWS to transfer personal data outside the European Economic Area (EEA), to any country, including to the US.


7. Security

The security of your information is important to us. When you enter sensitive information (such as a credit card number) on our order forms, we encrypt the transmission of that information using secure socket layer technology (SSL).

We follow generally accepted standards to protect the information submitted to us, both during transmission and once we receive it. No method of electronic transmission or storage is 100% secure, however. Therefore, we cannot guarantee its absolute security.


8. Our Policy Toward Children

Our Service is not directed to persons under 13. We do not knowingly collect personally identifiable information from children under 13. If a parent or guardian becomes aware that his or her child has provided us with Personal Information without their consent, he or she should contact us at  If we become aware that a child under 13 has provided us with Personal Information, we will take steps to delete such information from our files.


9. Changes to our Privacy Policy

This Privacy Policy may change from time to time, so please check back from time to time. If we make a change to this privacy policy that we believe materially reduces your rights, we will provide you with notice (for example, by email). By continuing to use the Service after those changes become effective, you agree to be bound by the revised Privacy Policy.


10. Contact Us

Social & Mobile, Inc. welcomes your comments regarding this Privacy Policy. Please contact us by email at


Appendix 1. Third party service provider

Service provider Purpose Website
Google Cloud Cloud Infrastructure
Amazon Web Service Cloud Infrastructure
Flurry Analytics User Analytics

Last updated March 15th, 2021