Privacy Policy

For the To-Do Notes Checklist Widget app · Last updated: October 23, 2026

Marsian Arts makes the To-Do Notes Checklist Widget app for Android. The app is free, with optional purchases that remove its advertisements or unlock every icon pack. This policy explains what the app keeps on your device, what leaves it, who receives it, and the choices you have.

In Short

• Your notes and lists stay on your device. We never receive them.
• The app shows advertisements from Google AdMob and measures how it is used with Google Analytics for Firebase. When it goes wrong, it reports the error to me with Firebase Crashlytics.
• In the European Economic Area and the United Kingdom, none of those uses your personal data unless you agree, and one answer covers all three. Until you have answered, the app shows no advertisements, measures nothing at all and sends no error report. You can change your answer at any time.
• Measurement records how the app is used, and an error report what went wrong in it. Neither ever includes what you write in it.

What Stays on Your Device

Your notes, lists, note colours, deleted notes in Trash, your settings, and which list each home-screen widget shows are stored only in the app’s own storage on your device. They are not sent to me or to anyone else, except that measurement and error reports describe your settings in the rough form set out below. Uninstalling the app deletes them.

If Android backup is turned on for your device, Android may include this data in the backup it keeps in your Google account, along with error reports the app is still keeping and the identifiers described below. That backup is managed by Google under your device’s backup settings, which is also where you can turn it off.

Consent in the EEA and the UK

If you are in the European Economic Area or the United Kingdom, the app shows Google’s consent form when you open it. You give one answer, and it covers advertising, measurement and error reports:

• Until you have answered, the app shows no advertisement of any kind, measures nothing and sends no error report. Error reports wait on your device for your answer, and are sent only once it allows them. If the app cannot show you the form, it treats that as a refusal until it can.
• If you agree, advertising may be personalised, measurement may use an identifier for the app on your device, and error reports are sent, as described below.
• If you refuse, you will see only advertisements that use no personal data, and measurement is limited to anonymous signals that carry no identifier and are not stored on your device. No error report is sent: those kept on your device are deleted, and so is every later one until you change your answer.
• If you choose purpose by purpose under “Manage options”, error reports follow the purpose “Store and/or access information on a device”, because every report carries an identifier the app stores on your device. They are sent only if that purpose is on, whatever else you choose.

You can change or withdraw your answer at any time from Privacy Options at the end of the app’s Settings. If you only ever use the widget and have never opened the app, you have not been asked: nothing is measured, and error reports wait on your device until you open the app and answer.

If you answered before the app sent error reports, your answer counts for them too, and you are not asked again because of them.

Where the GDPR or the UK GDPR applies, advertising and measurement that use your personal data, and every error report, rely on your consent. Advertising and measurement that use no personal data do not.

Measurement (Google Analytics for Firebase)

I use Google Analytics for Firebase to learn which parts of the app and the widget people use, so that I know what to improve and what is worth keeping. Outside the EEA and the UK it starts once the app has checked, on its first opening, that no consent is needed where you are.

What the app records:

• Which features you use, and whether you used them in the app or on the widget. For example: ticking, deleting or restoring a note, moving between lists, opening search or Trash, and which screens you visit.
• Which widget sizes you have placed on your home screen.
• The settings you have chosen, such as theme, font, text size, icon packs and the widget’s icon shade.
• Roughly how many lists and notes you keep, in ranges such as “4–9”, never as exact counts.
• The steps of buying or earning something in the store: opening the store, starting a purchase, whether it completed, is pending or was cancelled, and whether a rewarded advertisement was watched. Whether you hold No Ads or all icon packs, and whether you bought or earned it, is recorded too.

What Google Analytics collects by itself:

• A random identifier for the app on your device. It is created when you first use the app and replaced if you reinstall the app or clear its data.
• Your approximate location at the level of country and region, worked out from your IP address. Google Analytics does not log or store IP addresses.
• The kind of device, its Android version, the app’s version and your language.
• When you first open the app, when you use it, when it is updated, and purchases made through Google Play (which product and its price, never your payment details).

What is never recorded:

• Anything you write: the text of your notes, the names of your lists, or what you search for. Not even their length.
• Your name, email address or Google account.
• Your device’s Advertising ID. The app tells Google Analytics not to collect it, and measurement is not linked to advertising.

Measurement data about individual app installations is kept for two months. After that, only reports that add everyone together remain.

Error Reports (Firebase Crashlytics)

I use Firebase Crashlytics to learn when the app or the widget goes wrong, so that I can fix it. An error report is made when the app crashes, when it stops responding (on Android 11 and later), and when it recovers from an error at one of the few places in its code that have been made to report one.

A report is kept on your device until the app or the widget next starts. It is then sent if the last answer the app has allows it, and deleted if it does not. Until the app has an answer, reports are neither sent nor deleted; once it has one, the reports kept until then are sent or deleted straight away. Crashlytics contacts no server until an answer allows a report to be sent.

In the EEA and the UK, the answer is yours, as described above. Elsewhere, reports are allowed once the app has checked, on its first opening, that no consent is needed where you are. If the app cannot get an answer, because it cannot find out whether consent is needed or cannot show the form, it treats that as a refusal until it can.

What an error report contains:

• What went wrong and where in the app’s code: the kind of error, the description the app or Android gave it, and the steps through the app’s code that led to it. For an error the app recovered from, also which of those few places reported it.
• When it happened, and whether the app was open on screen or in the background.
• The kind of device: its manufacturer and model, its processor, memory and storage, its Android version, whether it is rooted and whether it has a proximity sensor. Also its state at that moment: how much memory and storage were in use, the battery level and whether it was charging, and the screen’s rotation.
• The app’s version.
• A random identifier for the app on your device, which Crashlytics creates for error reports alone. It is replaced if you clear the app’s data, or reinstall the app without restoring it from a backup.
• The app’s settings, in the same rough form as measurement: which widget sizes you have placed, your icon packs, the widget’s icon shade, theme, font and text size, roughly how many lists and notes you keep, in ranges, and whether you hold No Ads or all icon packs and whether you bought or earned them.
• The measurement events leading up to the error, such as ticking a note or opening Trash, in the same words measurement records them.

What is never in an error report:

• Anything you write: the text of your notes, the names of your lists, or what you search for. Before a place in the app may report an error it recovered from, it is checked that nothing it can report carries your text.
• Your name, email address or Google account. The app never tells Crashlytics who you are.
• Your device’s Advertising ID.

When a report of a crash is sent, Crashlytics also tells Google Analytics that the app crashed. That is measurement, and follows your answer for measurement.

Error reports, with the identifiers and measurement events in them, are kept for 90 days. After that, Google starts deleting them from its systems, backups included.

Advertising (Google AdMob)

The app shows a banner advertisement and offers optional rewarded advertisements in its store. The widget shows no advertisements. Google AdMob may collect your device’s Advertising ID, your IP address, information about your device and how you interact with advertisements, in order to show, measure and, where allowed, personalise advertisements. In the EEA and the UK this follows your answer in the consent form above, and advertising partners named in that form receive data only as that form describes.

Wherever you are, you can reset or delete your Advertising ID, or opt out of personalised advertising, in your device’s Android settings (usually under Privacy → Ads, or Google → Ads).

Buying No Ads, or earning it by watching a rewarded advertisement, removes the banner. It does not change measurement or error reports, which are described separately above.

Purchases (Google Play)

Purchases are made through Google Play, which handles payment. We never see your payment details. The app asks Google Play which products you own and keeps a record of them on your device, along with when any reward you earned by watching an advertisement runs out.

Who Receives Data

The only company that receives data from the app is Google, as the provider of Google Analytics for Firebase, Firebase Crashlytics, Google AdMob, the consent form and Google Play. For advertising, this also includes the advertising partners named in the consent form, where you allow them. I do not sell your data. Google’s own policies explain how it handles this data:

• Google Privacy Policy
• How Google uses information from sites or apps that use its services
• Privacy and Security in Firebase
• AdMob

Your Choices and Rights

• Change or withdraw your consent from Privacy Options at the end of the app’s Settings, in the EEA and the UK. Withdrawing also deletes the error reports not yet handed over for sending, including any from the rest of that session. A report already handed over is not recalled, even if your device was offline and it has not left yet, and is kept as described above.
• Reset or delete your Advertising ID, or opt out of personalised advertising, in Android settings.
• Clear the app’s data or uninstall it to delete everything it keeps on your device, error reports not yet sent included, and to replace the identifiers Google Analytics and Crashlytics use, unless Android restores them from a backup.

Depending on where you live, you may have the right to access, correct or delete personal data, to object to how it is used, and to complain to your data protection authority. Because we never receive your notes, your name or your contact details, and neither the measurement data nor the error reports are linked to you, we usually cannot pick out your data from anyone else’s. Still, please contact us with any request and we will do what we can.

Security

Your notes are kept in the app’s private storage, which other apps cannot read. Data the app sends to Google is encrypted in transit. No method of storage or transmission is completely secure, so I cannot guarantee absolute security.

Children’s Privacy

The app is not directed at children under 13, and I do not knowingly collect personal information from them. If you are a parent or guardian and believe your child has provided personal information through the app, please contact me and I will do what I can to remove it.

Changes to This Privacy Policy

I may update this policy when the app changes. The new version will be posted on this page with a new “Last updated” date, and takes effect when it is posted.

Contact Us

If you have any questions or requests about this Privacy Policy, do not hesitate to contact me at:

Marsian Arts
Email: [email protected]