Privacy policy

Sofora apps (Android, Windows) and sofora.softieons.com, by Softieons Technologies, Surat, India. Last updated 4 November 2026.

In short

Your notes are yours. Without an account, nothing you write ever leaves your device. With an account, we store only what's needed to sync your devices, we never sell data, we show no ads, and our staff can't read your notes.

1. Using Sofora without an account

Everything you write, draw, record or attach is stored only on your device. We receive nothing.

2. What we collect when you create an account

• Account details: your name, email address and password. The password is stored only as a secure hash.
• Your synced content: folders, notes, diaries, pages, pictures, audio recordings and their details, so your other devices can get them. Locked and vault notes are synced only after you set a sync passphrase. They are then end-to-end encrypted on your device, and we can't read them.
• Devices: a random device id, the device name, type and app version, so you can see and sign out your devices and we can apply your plan's device limit.
• Usage numbers: how much storage you use, how many items you sync and when you last synced. We use these to run the service and apply plan limits, never to read your notes.
• Plan and payments: your plan, its dates and your payments (amount, date, method and the payment provider's reference).

3. Payments

Online payments on our website are processed by Razorpay (Razorpay Software Pvt. Ltd.). Your card, UPI or bank details go to Razorpay, not to us. We receive only the result and a reference. Razorpay's privacy policy is at razorpay.com/privacy.

4. What we don't do

• We don't sell or rent your data, and we don't share it with advertisers. There are no ads.
• We don't use advertising or tracking SDKs in the apps.
• Handwriting to text uses Google ML Kit, which runs on your device: your writing isn't sent anywhere. When it downloads a language model, Google may receive basic diagnostic information (app and device details), as described in Google's ML Kit terms.
• Our admin tools show only counts, sizes and dates, never the content of your notes.

5. Permissions the Android app asks for

• Microphone: only when you start an audio recording in a note.
• Notifications, and alarms & reminders: only for diary and task reminders you turn on.
• Camera / photos: only when you choose to add a photo or picture to a page.
• Internet: to sync when you sign in, and to download handwriting-recognition models once.

6. Security

• All connections to our server use HTTPS.
• On your device, locked notes are encrypted with a key kept in the phone's secure hardware (Android Keystore).
• Sign-in tokens are stored encrypted on your device.

7. How long we keep data

• We keep your account and synced content until you delete them.
• Notes you move to the recycle bin are removed after 30 days.
• Payment records are kept for up to 8 years for tax and accounting, without your account once it's deleted.
• Server backups are overwritten within 30 days.

8. Deleting your account

In the app: Settings → Account & sync → Delete account. On the web: https://sofora.softieons.com/account/delete. Or email us from your account's address. Deletion removes your account and everything synced, straight away.

9. Your rights

Under India's Digital Personal Data Protection Act, 2023 (and similar laws where you live), you can ask to see, correct or delete your data, and to withdraw consent. Write to business@softieons.com; we reply within 30 days.

10. Children

Sofora isn't directed at children under 13, and we don't knowingly collect their data. If you believe a child has created an account, contact us and we'll delete it.

11. Changes

If we change this policy, we'll update the date above and, for important changes, tell you in the app.

Contact

Softieons Technologies · Surat | India · business@softieons.com · softieons.com