1. Scope, Operator, and Effective Date
This Privacy Policy describes how Glowseed Studio ("Glowseed", "we", "us", or "our") handles information in connection with the NoctForge mobile application and all of its built-in tools, modules, widgets, and settings flows.
This policy covers the full NoctForge app experience, including (but not limited to): music player, authenticator, notes, PDF tools, voice memos, QR scanner/generator, creator tools, sensor tools, games, utility tools, launcher and home views, and all settings surfaces.
By installing or using NoctForge, you acknowledge this policy.
2. Our Core Privacy Commitment
NoctForge is built on a single principle: your data stays on your device.
We do not collect your personal information. We do not run analytics or tracking. We do not serve advertisements. We do not operate user accounts. We do not sell, share, or transmit data about you to any third party.
The INTERNET permission is explicitly absent from the NoctForge Android manifest. The app is technically incapable of making any outbound network connection. This is not a policy choice that could change with a server-side update — it is enforced at the OS permission level.
All processing described in this policy occurs locally on your device, under your direct control.
3. What Data Is Processed and Where
Depending on which tools you use, NoctForge processes the following data — all locally on your device:
• User content: notes, documents, images, audio recordings, music library metadata, QR payloads, tag edits, and any other content you create or import.
• App preferences and state: theme pack, accent colour, home layout, enabled tools, personalisation settings, and launcher configuration.
• Security state: local lock settings, biometric configuration flags, and secure storage keys. Raw biometric data is never received or stored by NoctForge — biometric operations use the platform's own secure hardware.
• Operational metadata: local timestamps, playback history, tool usage history, and internal state required to resume workflows.
• Sensor readings: real-time readings from hardware sensors (compass, barometer, accelerometer, light meter, etc.) for sensor tools. Not stored or transmitted.
None of this data leaves your device unless you explicitly export or share it yourself.
4. Permissions — What We Request and Why
NoctForge requests only the permissions required for specific features. You can deny or revoke any permission at any time in Android Settings → Apps → NoctForge → Permissions. Revoking a permission disables the relevant feature but does not affect other tools.
CAMERA
Used by: Flashlight, QR Scanner, QR Generator (screen scanning), camera utility tools.
RECORD_AUDIO
Used by: Instrument Tuner (pitch detection from microphone), Voice Memos (recording).
MODIFY_AUDIO_SETTINGS
Used by: Metronome and audio routing features to manage audio focus and output.
READ_MEDIA_AUDIO
Used by: Music Player to index and play audio files from folders you select.
USE_BIOMETRIC / USE_FINGERPRINT
Used by: Authenticator, NoctForge Notes, and tools with a biometric lock. Biometric authentication is handled entirely by the Android Keystore — NoctForge never receives your fingerprint or face data.
ACCESS_FINE_LOCATION
Used by: Compass and Heading HUD (for GPS-assisted bearing accuracy). Location is used in real-time only and is never stored, logged, or transmitted.
BLUETOOTH_CONNECT
Used by: Device Info tool to display the name of connected Bluetooth devices. No Bluetooth data is stored or transmitted.
SYSTEM_ALERT_WINDOW (Draw Over Other Apps)
Used by: NoctPill — the floating overlay feature. Only active when NoctPill is enabled.
NOTIFICATION ACCESS (Special App Access — user-granted in system settings)
Used by: NoctPill — to display incoming notifications and currently playing media from other apps in the overlay. You control which apps are included: any app can be individually toggled off in NoctPill settings. Granted manually via Settings → Apps → Special app access → Notification access. NoctForge reads notification content solely to render it in the NoctPill overlay — nothing is stored, logged, or transmitted.
FOREGROUND_SERVICE / FOREGROUND_SERVICE_MEDIA_PLAYBACK
Used by: Music Player to continue playback in the background with a persistent notification. Standard Android requirement for background audio.
FOREGROUND_SERVICE_SPECIAL_USE
Used by: NoctPill overlay service to remain active while you use other apps.
WAKE_LOCK
Used by: Bedside Clock (screen-on) and Music Player (prevent CPU sleep during playback).
RECEIVE_BOOT_COMPLETED
Used by: Reminders and scheduled alarms. Re-registers alarms after a device restart so they continue to fire correctly.
POST_NOTIFICATIONS
Used by: Timers, Focus sessions, Reminders, and Music Player notifications.
SCHEDULE_EXACT_ALARM
Used by: Timers and Reminders that require delivery at a precise time.
Permissions explicitly NOT requested
- INTERNET — the app cannot make any network connection.
- AD_ID (Advertising Identifier) — no advertising or tracking of any kind.
- READ_EXTERNAL_STORAGE / WRITE_EXTERNAL_STORAGE — not used on modern Android.
- ACCESS_NETWORK_STATE / ACCESS_WIFI_STATE — not required; no network use.
5. Sensitive Features — How They Handle Your Data
Authenticator
TOTP secret keys are stored in encrypted local storage using the Android Keystore. Codes are generated on-device. Nothing is transmitted. Biometric lock gates access to secrets.
NoctForge Notes
Notes are encrypted at rest using XChaCha20-Poly1305 (AEAD) encryption. The encryption key is hardware-backed via the Android Keystore. Data never leaves your device.
NoctForge PDF
PDF processing, OCR, digital signing, and document manipulation all occur on-device. No document content is transmitted.
Voice Memos
Recordings are saved to app-private local storage. They are not uploaded, indexed, or transmitted anywhere.
Music Player
Your music library is indexed from folders you select. Metadata is read locally. Listening history for YearForge is stored locally only and is never shared.
QR Tools
QR codes are scanned and decoded on-device. Scan history is stored locally. Nothing is transmitted.
Sensor Tools
All sensor readings (compass, barometer, accelerometer, proximity, light meter, spirit level) are consumed in real-time and are not stored or logged.
6. Data You Choose to Export or Share
NoctForge only passes data to another app or destination when you explicitly trigger a share, export, or open action (for example: sharing a QR code, exporting a PDF, or saving a voice memo to a folder).
Once you export content, handling of that content is governed by the destination app or service you chose. Glowseed does not control what happens to data after you choose to share it.
7. Data Storage, Retention, and Deletion
All app data is stored on your device in app-private storage or in locations you have explicitly chosen (such as a folder you selected for music or exports).
Data remains on your device until you delete it within the app, clear app data via Android Settings, or uninstall NoctForge. Uninstalling removes all data stored in app-private directories. Files you exported to shared locations (such as Downloads) are not affected.
Because we have no servers, we cannot delete data on your behalf — you hold full control.
8. Backups and Device Transfers
If you use Android's built-in backup system (Google One Backup), app data may be included in that backup per your Android and Google account settings. That backup is governed by Google's Privacy Policy, not ours.
If you manually export data from NoctForge, the security of those exports is your responsibility. We recommend protecting sensitive exports with a strong password or encrypted storage.
For security-critical data (authenticator secrets, encrypted notes), verify the integrity of any backup before relying on it for recovery.
9. Google Play Store and Platform Data Collection
NoctForge is distributed through the Google Play Store. Google independently collects certain data related to app installation, updates, and crash diagnostics under its own Privacy Policy and Google Play terms. This is outside our control and governed entirely by Google.
NoctForge does not use Firebase, Google Analytics, Crashlytics, AdMob, or any other Google SDK that would give us access to usage or crash data about you. We receive no telemetry from the app.
For information on what Google Play collects, refer to Google's Privacy Policy at policies.google.com/privacy.
10. Security Controls and Limitations
NoctForge uses platform-recommended security patterns including:
• Android Keystore for cryptographic key storage (hardware-backed on supported devices).
• XChaCha20-Poly1305 encryption for sensitive content at rest.
• FLAG_SECURE to block screenshots on sensitive screens where enabled.
• Biometric gating for access to sensitive tools.
No security measure is absolute. Your overall security also depends on your device's lock screen strength, whether your device is rooted or compromised, and whether your Android OS and security patches are up to date. Keep your device updated and use a strong screen lock.
11. No Analytics, No Ads, No Tracking
NoctForge contains no analytics SDKs, no advertising SDKs, no crash reporting services, and no behavioural tracking of any kind. We do not know how you use the app, which tools you open, how long you use it, or anything else about your usage.
This is not a configuration option — there is no analytics infrastructure in the app at all. We cannot receive telemetry even if we wanted to, because the INTERNET permission is not present in the app manifest.
12. Children's Privacy
NoctForge does not knowingly collect personal information from anyone, including children. Because the app collects no data and has no internet connectivity, it does not present the data collection risks that COPPA (US), GDPR-K (EU), or equivalent regulations are designed to address.
NoctForge is not specifically directed at children under 13. If you are a parent or guardian with concerns about your child's use of a specific tool within NoctForge, contact us and we will respond promptly.
13. Your Rights Under Applicable Law
Australian Privacy Act 1988
GDPR (EU/UK)
CCPA (California)
Depending on your jurisdiction, you may have rights including access, correction, deletion, portability, and the right to object to processing.
Because NoctForge does not collect, store, or process your personal information on any server, most of these rights can be exercised directly and immediately by you — by deleting content, revoking permissions, clearing app data, or uninstalling the app.
We hold no personal data about you on any server. If you have a specific rights request or concern, contact us at glowseedstudio@gmail.com and we will respond within a reasonable timeframe.
14. Policy Updates
We may update this Privacy Policy to reflect changes to the app, new features, legal requirements, or clarifications. Updated versions will be published with a revised effective date via app updates.
Because we have no way to contact you directly (no accounts, no email collection), we encourage you to review this policy periodically. Material changes will be noted in the Play Store release notes.
15. Contact
Glowseed Studio
Email:
glowseedstudio@gmail.com
If you have a privacy question or concern, please include your app version (found in Settings), your Android version, and the specific tool or feature your question relates to. We aim to respond within 5 business days.