No account, no server, no analytics. Your notes stay on your phone.
Last updated 29 August 2026 · Eight Point Labs LLC
The short version. Our apps have no account, no server, and no analytics. Nothing you write is sent anywhere. We cannot read your notes, because we never receive them. Two things can leave your phone, both only because you asked: dictation, and looking up a store address. Both are explained below in plain terms.
Eight Point Labs LLC publishes Area8, an Android app for people who run several locations. Area8 is the app this policy describes, and it is the only software we distribute to the public today. If we publish another app, this page will say so and will say what that app does differently.
This site itself uses Google Analytics to count page views. That is the website, not the app; the app contains no analytics of any kind.
Nothing. Eight Point Labs operates no server for Area8, holds no account for you, and receives no copy of anything you enter. There is no analytics SDK, no crash-reporting SDK, no advertising SDK, and no tracking library anywhere in the app.
The Area8 release build does not declare the Android INTERNET permission. On Android, an app without that permission is blocked by the operating system from opening a network connection at all. That is enforced by the OS, not by our code, so it holds regardless of what our code does or what any library inside the app might try to do. The app also contains no HTTP client library and no WebView.
The honest qualifier. “Area8 cannot reach the internet” is a statement about the Area8 process. It is not a claim that nothing you type can ever reach a network by any route. Android lets any app hand work to a system service, and a system service runs in its own process with its own network access. Area8 does this in exactly two places, both of which you trigger yourself: dictation (section 4) and looking up a store's address (section 6). Everywhere else, the missing permission is the whole story.
Everything you enter, and nothing else:
This lives in the app's private storage area, which Android prevents other apps from reading. It is not written to your shared photo gallery, your Documents folder, or anywhere else another app can browse.
The app sets allowBackup="false", so Android does not copy its data into Google's automatic cloud backup. The only way your data leaves the device is if you personally export it.
If the app crashes, it writes the error to a file in that same private storage. It is not uploaded, because there is no crash-reporting service to upload it to and the app could not reach one if there were. At most ten are kept and the oldest is discarded.
A crash file holds the error itself, the name of the thread it happened on, your device model, and the app version. It never holds note text, names, store numbers, phone numbers, or photo paths. The support screen has a button that puts one into an email draft for you; nothing is sent unless you read the draft and send it. That is the only route by which a crash ever reaches us, and it is worth being straight about the trade: a commercial crash service would tell us about far more bugs than this will. We took the worse bug reporting on purpose.
Area8 declares exactly two permissions. Both are optional, both are asked for at the moment you first use the feature that needs them, and denying either leaves the rest of the app fully working.
Used to show your own reminders on your own phone at the time you scheduled them. Reminders are scheduled locally by the operating system. There is no push server, no notification service account, and nothing is sent anywhere to make a reminder appear.
Used only for dictation, and only while you are actively holding the dictation control. Please read this part carefully, because it is the main place where data can leave your phone.
The app does not perform speech recognition itself. It hands the microphone to Android's speech recognition service, which on most phones is a separate Google app with its own network access and its own privacy policy.
What we do: the app asks the system to prefer on-device recognition, so dictation works with no signal. On Android 13 and later that request is made explicitly. The app never writes the audio to disk. The recording is not saved, not cached, and not included in backups or exports. Only the resulting text is kept, and only in the note you were writing.
What we cannot promise: the on-device preference is a request to the system, not a guarantee. The recognition service decides how to fulfil it. On Android versions before 13, or on a device whose recognition service ignores or cannot honour the preference, your speech may be sent to that service's servers for transcription. Once your audio reaches that service it is governed by that service's privacy policy, not by ours. On a typical Android phone that means Google's.
If this matters to you, do not grant the microphone permission and type your notes instead. Nothing else in the app is affected.
The app does not request location access and does not track where you are.
The app uses Android's own picker, so it sees only the items you select and never your whole library. When you attach something, the app copies it into its own private storage; the original in your gallery or your files is untouched.
On import, the app strips privacy-sensitive EXIF metadata from the copy of an image:
Orientation and capture date are kept, because the app uses them to display and sort your photos. The intent is that a photo of a walk-in door does not carry the store's coordinates into every backup and every shared report.
Honest limits. This strip is best-effort and works on standard JPEG images. If a file is in a format whose metadata cannot be edited, the copy keeps its original bytes, metadata included. We do not re-encode your photos, because doing so would visibly degrade them. A non-image attachment, such as a certificate PDF, is stored as you supplied it.
The app cannot send anything anywhere on its own. It can, when you tap a button, pass data to another app you have chosen. In every case below you start the action and you pick the destination. From that point on, the receiving app's privacy policy governs, not ours.
Shared files are exposed through a restricted mechanism that grants the receiving app one-shot access to that single file only. The database and the photos held inside the app are not reachable this way.
Backups are created only when you ask for one, and only where you choose to save them.
A backup is encrypted with a password you choose, using AES-256 in GCM mode, with the key derived from your password by PBKDF2-HMAC-SHA256 at 600,000 iterations (the current OWASP recommendation). The file's authentication tag is verified before any of its contents are read, so a corrupted or tampered backup is rejected rather than partially imported.
Your password is never stored anywhere and is never transmitted. We cannot recover it and we cannot decrypt your backup. If you lose the password, that backup is unrecoverable. Keep it somewhere safe.
Once a backup file is saved to your chosen location, its security is in your hands. If you save it to a cloud drive, that provider's policy applies to the file.
If you enable the app lock, the app uses Android's standard biometric prompt. Your fingerprint or face data is held in your phone's secure hardware and is never made available to the app. The app receives only a yes or no result.
Area8 is built for keeping notes about the managers you work with, so you will be recording information about other people. That information stays on your device under your control. You can archive someone, which keeps their history searchable, or delete them and every note about them permanently. You are responsible for what you record and for any obligations your employer or local law places on you.
Area8 is a tool for people who manage retail or restaurant locations. It is not directed at children and we do not knowingly collect data from anyone, including children.
Because Eight Point Labs collects, receives, and stores no personal data from the app, there is no data held by us for you to access, correct, export, or have deleted. There is no request to make and no request process to go through.
Your data is on your device and under your control:
We do not sell data, share data, or disclose data to third parties, because we do not have any.
If this policy changes, the revised version will be posted at this address with a new date. Material changes affecting how an app handles your information will also be noted in that app's release notes.
Eight Point Labs LLC
4030 Wake Forest Rd, Ste 349
Raleigh, NC 27609
Privacy questions: [email protected]
Anything else: [email protected]
You do not have to take our word for sections 1 and 2. Anyone with a copy of the Android package can check the strongest claims directly: