Privacy policy

What we do not collect

The absence of data collection is the central design choice, so it is worth being specific about it. We do not:

• collect your name, email address, phone number or any other identifying information;
• require you to create a Paperwrist account or sign in with us;
• collect device identifiers or advertising identifiers (Apple's IDFA, Android's advertising ID);
• track your location;
• track your use of the app, or send crash reports to servers of ours. We have none;
• upload, read in the background, index or scan your files, your cloud drive or your photo library;
• share, sell or transmit your data to any third party for our own purposes. If you connect Notion, the app talks to Notion at your instruction and to no one else, as described below.

Your files

Paperwrist is a file viewer, so it necessarily reads the files you want to read. But only those, and only on your devices.

• Paperwrist accesses a file only when you pick it yourself through the system document picker. It never browses, indexes or scans anything you have not explicitly chosen, and it requests no broad file-system access.
• When you add a file, Paperwrist reads it on the phone to prepare a copy for the watch. Markdown and text are sent as-is; PDFs are rendered to page images on the phone (watches cannot display PDFs natively) and the images are sent instead.
• That prepared copy is transferred to your paired watch and cached on the watch so you can read it offline. It is not uploaded anywhere.
• Paperwrist remembers where you picked each file from, so it can refresh the watch copy when you ask. On iOS that is a security-scoped bookmark; on Android a persisted URI permission. Both stay on your device.
• Removing a file in Paperwrist deletes the app's copy from your phone and your watch. Your original file is never modified or deleted.

Connecting Notion (optional)

Paperwrist can read pages from Notion, if you set that up yourself. This is the only part of the app that uses the internet, and it stays off until you turn it on. Everything else in Paperwrist works without it.

• You connect it by pasting your own Notion internal integration token. There is no Paperwrist account, no sign-in with us, and no server of ours in between.
• The token is stored in your phone's own secure storage: the Keychain on iOS, the equivalent on Android. It is marked to stay on that device, so it is not carried into backups or device transfers.
• While connected, the app talks to api.notion.com and to no other host. It only reads. It never writes to, changes or deletes anything in your Notion.
• It can only see the pages you have explicitly shared with your integration inside Notion. The rest of your workspace stays invisible to it.
• Importing a page takes a copy as it is at that moment. It is not kept in sync. When you edit the page in Notion, you decide whether to update the copy.
• What you do in Notion is covered by Notion's own privacy policy. We are not a party to it, and we receive nothing from it.
• You can remove the connection at any time in the app, which deletes the token from your device. Pages you already imported stay, because they are ordinary copies on your phone and watch.

Permissions the app requests

Paperwrist requests no location, contacts, camera, microphone, motion or photo-library permission. The only thing it reads is the specific file you select through the system document picker, which grants access to that file alone. You can remove any file from your watch at any time in the app. On Android the app declares the internet permission. It exists for the optional Notion connection and for nothing else.

In-app purchases

Paperwrist offers a one-time Pro unlock, which removes the free tier's single-document limit. It is handled by the platform's own billing system. StoreKit on Apple, Google Play Billing on Android.

• The transaction is handled entirely by Apple or Google. We never see your name, your payment details, your account, or any other personal data connected to the purchase.
• The stores may send us anonymous aggregated sales reports ("X copies sold in country Y this month"). Those reports do not identify individual customers.
• The unlock is verified through the platform's billing framework and stored on your device. There is no separate account and no login.
• You can restore your purchase on a new or reset device with Restore purchase in the app. The store identifies the entitlement without telling us who you are.

This website

This section is about paperwrist.app only. The app's posture, described above, is independent of it.

• No cookies are set. Not for analytics, not for consent, not for anything. That is also why you are never asked to dismiss a cookie banner.
• No analytics and no third-party scripts. Every script, stylesheet, font and image is served from this domain. Nothing is fetched from a CDN, an ad network or a font service, so no third party learns that you visited.
• No forms. Contact is by email; there is nothing on this site that collects what you type.
• The site is hosted on Cloudflare. As with any web host, Cloudflare processes the connection itself (including your IP address) in order to serve the page, and may keep short-lived operational logs for security and abuse prevention. We do not receive, request or have access to visitor-level data from it.
• Your language, your light/dark choice and your platform preference (iPhone or Android) are stored in your own browser's local storage, and a short-lived flag in session storage remembers that this tab has already been sent to your language. That is the complete list. None of them leave your browser, none of them identify you, none are shared with anyone, and clearing site data removes them all.

Children's privacy

Paperwrist is rated for all ages and does not knowingly collect personal information from anyone, including children under 13. It does not collect personal information from anyone at all.

Third-party services

Paperwrist bundles no third-party SDK, framework or analytics library. Its runtime dependencies are limited to the operating systems' own frameworks, including the platform billing framework used solely to process the Pro purchase. There is no analytics service, no advertising network and no crash-reporting service beyond the operating system's own. The one third-party service the app can reach is Notion, and only if you connect it yourself, as described above.

International data transfers

Paperwrist transmits no data to us, so there are no international transfers on our side to disclose. All app data stays on your personal devices. If you connect Notion, your requests go to Notion's own infrastructure under Notion's privacy policy, and we are not a party to that transfer.

Your rights (EU / GDPR)

The app's design means there is no personal-data processing for us to act on. To be explicit:

• Access: there is no personal data we hold about you.
• Rectification and erasure: there is nothing to correct or delete on our side. To remove all app data from your devices, delete the Paperwrist app; your operating system removes its local storage, including any cached copies, along with it.
• Portability: not applicable, as we hold no personal data.
• Objection and restriction: not applicable, as we carry out no processing of personal data.
• Complaint: if you nonetheless believe we have mishandled data, you may contact your national data protection authority. In Spain that is the Agencia Española de Protección de Datos.

Changes to this policy

If we ever change how Paperwrist handles data (for instance by adding a feature that needs a new permission) we will update this policy and the "Last updated" date above. Material changes will also be reflected in the store privacy labels that Apple and Google display on the app's listing.

Contact

For privacy questions, or to exercise any of the rights above, write to:

Mario Longhi
privacy@paperwrist.app