Markdown Reader & Editor

privacy-policy.md

Kebijakan Privasi

Markdown Reader & Editor adalah aplikasi catatan yang mengutamakan perangkat: berjalan sepenuhnya offline, tidak perlu akun, dan catatan Anda tetap di perangkat kecuali Anda menyalakan cadangan cloud opsional.

App Markdown Reader & Editor Package com.mobiway.markdownreader Publisher MOBIWAY TECHNOLOGY CO., LTD Last updated September 20, 2026

Dokumen ini hanya tersedia dalam bahasa Inggris.

01

Data we collect

Your notes and files

not collected by us

Markdown files, projects and folders you create are stored locally in the app's private storage on your device. We never upload, read, or otherwise access this content unless you explicitly turn on Google Drive Backup below.

Google Drive Backup — optional

OAuth scope requested

drive.appdata — a hidden, app-only folder in your Drive. The app cannot see, list, or modify any other file in your Google Drive.

If you connect a Google account, your notes are packaged into a backup archive and uploaded to this hidden folder so you can restore them on the same or another device. This data lives in your own Google account, governed by Google's Privacy Policy — we don't access it ourselves. Revoke access anytime from the app's Settings or your Google Account permissions.

Crash reports — Firebase Crashlytics

Automatically collects device model, OS version, app version and stack traces when the app crashes, to help us find and fix bugs. Disabled in debug builds. Not linked to your notes' content.

Usage analytics — Firebase Analytics

In released builds only, anonymous aggregated usage statistics (which features are used, session counts) help us understand how the app is used. Never includes note content.

Approximate country — ipapi.co

Once per install, the app makes a direct request from your device to ipapi.co, a third-party geolocation service, so it can label your usage analytics with an approximate country resolved from your IP address. Only the country code is stored, alongside the analytics identifiers described above — never your IP address itself, and never your notes. ipapi.co is not run by us and is governed by its own privacy policy. If that request fails, the app falls back to the country code your SIM card already broadcasts to your carrier, which never leaves your device beyond this same analytics label. This lookup runs only while usage analytics is enabled for you, and it does not use, and is unrelated to, the Android location permission — the app never requests that permission.

Import from URL

When you use "Import from URL," the app requests the URL you provide to download its content into a note. We don't log or retain the URLs you enter beyond completing that import.

Viewing HTML files

The app can display an HTML file you open in a built-in web view — from your file manager's "Open with," from an HTML file in your library, or as a preview of a file you just exported. That page runs with JavaScript enabled and may load images, stylesheets, fonts or scripts from the internet if the page itself references them. Those requests go directly from your device to whichever servers that page names; we neither choose nor see them, and we receive nothing about them.

We limit what such a page can reach: it is loaded without a document origin, so it cannot read your notes, your files or any other app data, and it has no bridge into the app, and Google Safe Browsing is enabled for this view. Nothing is loaded automatically — the app only shows a page you explicitly opened.

Links inside the page open in the same view, so you can follow a document's links without leaving the app — which also means the page you end up on may no longer be the file you opened. Use "Open in browser" at any point to continue in your normal browser instead.

Purchases — Google Play Billing

The app offers optional paid upgrades — a subscription and a one-time unlock — that remove advertising and unlock additional features. Purchases are processed entirely by Google Play, and we never see or receive your payment details: no card number, no billing address, no name. The app asks Google Play which products you own and stores only the answer — which tier you hold, and when it was last checked — in its private storage on your device. We run no server, so nothing about your purchase leaves your device and Google's systems.

The app sends Google Play a random identifier generated on this installation, so a purchase made here can be told apart from one made on another device signed in to the same Google account. It is not derived from your account, your device, or anything you type into the app. When a purchase completes, the app records the product and amount with Firebase Analytics so we can measure how the app is doing. Managing, changing or cancelling a subscription happens in Google Play, not in the app. Payments are governed by Google Play's Terms of Service.

Advertising — Google AdMob

Free use of the app is supported by ads served by Google AdMob: a banner on the four main tabs, and one full-screen ad when you open the app. Ads are never shown while you read a document or write in the editor. AdMob may use a device advertising identifier to select and measure ads; it never receives the content of your notes. In the EEA and the UK, a Google consent form asks how ads may be personalised before any ad loads, and your answer is stored on your device — you can change it any time in Android Settings ▸ Google ▸ Ads. Buying a paid upgrade removes all advertising.

02

Permissions

The app does not request contacts, location, camera, microphone, SMS, or general device storage access. Two permissions are declared by the app itself:

PermissionPurpose
INTERNET Drive backup and restore, Import from URL, viewing HTML files, crash and analytics reporting.
ACCESS_NETWORK_STATE Tells offline apart from "not signed in yet," so the app doesn't wrongly prompt you to re-grant Drive access while your device has no network.
POST_NOTIFICATIONS Warns you three days before items in Trash are deleted for good. The app asks only after you open Trash, you can decline, and you can turn it off at any time in Settings. Notifications are composed on your device from data already stored there — nothing is sent to a server, and the app has no push channel.
FOREGROUND_SERVICE + FOREGROUND_SERVICE_DATA_SYNC Keeps a large import or export running when you tap "Run in background" and leave the screen. The service exists only while that one task runs, shows a progress notification the whole time, and stops the moment the task finishes or you cancel it. It never starts on its own — only from a task you started.

The libraries the app is built with add a few more. They show up on the app's Play Store page, so we list them here rather than let them look undisclosed:

PermissionAdded byPurpose
AD_ID Google AdMob Reads the device advertising identifier to select and measure ads. Goes away with your ads when you buy a paid upgrade.
ACCESS_ADSERVICES_AD_ID, ACCESS_ADSERVICES_ATTRIBUTION, ACCESS_ADSERVICES_TOPICS Google AdMob The Android Privacy Sandbox equivalents of the above.
WAKE_LOCK, FOREGROUND_SERVICE WorkManager Let scheduled background work — Trash cleanup and Drive backup — finish once it has started.
BIND_GET_INSTALL_REFERRER_SERVICE Firebase Analytics Attributes an install to the campaign it came from.
03

Data sharing

We do not sell your data. Information described above is shared only with:

  • Google Firebase (Crashlytics, Analytics) — as a data processor, under Google's Privacy Policy and Firebase's terms.
  • ipapi.co — receives your device's IP address once per install, to resolve the approximate country recorded in usage analytics. See Data we collect above.
  • Google Drive — only if you opt in to Backup, and only within your own account's hidden app-data folder.
  • Google Play Billing — only if you buy a paid upgrade, and only as far as Google Play needs to process and verify it.
  • Google AdMob — for serving and measuring ads in the free version. Removed entirely once you buy a paid upgrade.
  • Firebase Remote Config — the app fetches its own configuration (which ads and offers to show) from Google. The request carries an app-instance identifier and none of your content.
  • Google Play (in-app updates) — the app asks Play whether a newer version exists so it can offer you the update in place.

Other than your IP address going to ipapi.co as described above, we do not otherwise transmit your notes or personal data to any third party.

04

Retention & deletion

  • Local notes are deleted when you delete them in the app, or when you uninstall the app.
  • Drive backups are deleted when you remove the backup in-app, disconnect your Google account, or revoke access from your Google Account permissions page.
  • Crash and analytics data follows Firebase's standard retention periods and is tied only to a device/installation identifier, not your identity.
Step-by-step

Our Delete Your Data page lists the exact steps for each of these, what each one removes, and how long anything is kept.

05

Children's privacy

The app is not directed at children under 13, and we do not knowingly collect personal information from children.

06

Security

Notes are stored in the app's private, sandboxed storage on your device. Drive backups travel over encrypted HTTPS connections to your own Google Drive account.

07

This website — cookies & analytics

This clause is about markdowns.web.app, the website you are reading, not about the app.

We use Google Analytics 4 to count visits, see which pages are read and how far down, and measure how many people go on to open our Google Play listing. It records the pages you view, roughly how long you stay, the site or search that sent you here, and coarse device and country information derived from your IP address. It never receives your name, your email or anything you type.

Cookies set

_ga and _ga_<id> — first-party cookies that let Google Analytics tell one visit apart from the next. They expire after two years.

Nothing is stored on your device until you accept. Analytics storage starts denied: until you choose "Accept" in the banner, no cookie is written and no identifier is kept, and your answer is remembered in your browser's local storage so you are only asked once. You can change your mind at any time — use the "Cookie settings" link at the bottom of any page, or clear this site's data in your browser. You can also install Google's opt-out browser add-on, which applies to every site.

Analytics for this website is run in the same Google Analytics property as the app's, so a visit here and an install from here can be counted as one journey. The data is processed by Google as described in Google's Privacy Policy. We set no advertising cookies on this website and run no advertising here.

Two things this site loads from Google regardless of your choice, because they are needed to render the page rather than to track you: the Roboto webfont from fonts.googleapis.com, and the "Get it on Google Play" badge, which is served from this site itself. Neither sets a cookie.

08

Changes to this policy

We may update this policy from time to time. Changes are posted on this page with a revised "Last updated" date above.

09

Contact

Questions about this policy or how your data is handled — reach out below.