Core Privacy Policy

private. essential. Core...

Go-to Android apps. No third‑party ads. No tracking. No accounts. No AI inside.

Operator: Core Products & Services, LLC

Contact: gotocorepstx@gmail.com

Effective date: October 25, 2026

Applies to: Core Gallery, Core Music, Core Notes, Core Scan, Core Sign, Core Utilities, Core Weather, Core Workout, and Trio Live Wallpapers for Android.

1. What privacy means

Privacy, as used in this policy, refers to the practices Core Products & Services, LLC does not undertake. Beyond the promises above, there are no analytics, no profiles, no cloud, no Core servers, and no social features. Core does not operate an anonymizing service. Encryption is used only where a section below says so: the Core Gallery vault, the Core Sign vault, everything Core Notes stores, and the FTP connections you save in Core Utilities. Core Weather, Core Music, Core Utilities, and Google Play purchases are the only things that use the internet, each described in its own section.

2. Purchases in all Core apps

Every Core purchase is completed or facilitated through Google Play. Google Play processes the payment and decides refunds. Core does not receive your card details, and Core does not issue a separate license you can hand to another person. Prices are in U.S. dollars and are shown on Google Play before you buy.

3. Rate or share pop-up

Core Gallery, Core Notes, Core Scan, Core Sign, Core Weather, Core Workout, and Trio Live Wallpapers can show a "Rate or share" pop-up now and then. It appears no sooner than 90 days after you install the app, and only after you have opened the app on at least 5 different days. After that, it appears at most once every 90 days. Core Scan also waits until you have saved a scan, Core Sign until you have exported a document, and Core Workout until you have finished a workout.

The app itself sends nothing. The pop-up is built into each app and does not use Google Play's in-app review service.

4. Children

Core apps are general-audience utilities. They are not made for children, and they have no accounts, profiles, chat, or social features. Core does not knowingly collect personal information from children. Core Utilities is meant for ages 16 and up because of the M-Lab speed test. If you think a child has sent us personal information, for example in an email, contact us and we will delete it.

5. Your choices

6. Changes to this policy

If an application's behavior changes, this policy and the effective date at the top will be updated. This page should be reviewed periodically. Material changes will also be noted in the relevant application's release notes.

7. Disclaimers

Each app has its own Disclaimers screen. Those disclaimers are separate and are not part of this privacy policy.

---

8. Core Gallery

Core Gallery is a paid app ($2.99, no trial) for viewing and organizing photos and videos on the device. Its vault is encrypted. The rest of the app is not. It has no accounts.

No internet

Core Gallery does not request Android's internet permission, so the app cannot connect to the internet. Your photos are not uploaded anywhere by Core Gallery, and editing and enhancing happen on the device. The first time you open Core Gallery, Android's Google Play Store app checks your Google Play purchase, so that first start needs a connection.

What stays on your device

Vault

You can move photos and videos into Core Gallery's Vault. The vault is encrypted with AES-256-GCM. The key stays in the Android keystore and is wrapped by a PIN or a 9-dot pattern you set, or by a strong biometric if you turn it on. Biometric unlock is optional: Android checks it on the device, and Core never sees or stores your biometric data. Your PIN or pattern always works too. Files in the vault are not in the normal photo library and do not show in the Files app. Leaving the vault locks it. Moving a picture out returns it to the album it came from. Vault videos can't be opened in other apps, to keep them private.

Photo location

What leaves your device

Only what you send yourself, plus one check: when you first open Core Gallery, Android's Google Play Store app confirms your purchase with Google Play. Core Gallery sends nothing itself; Google's privacy policy applies to that check. The crash log stays on your device unless you choose to send it: Settings › About › Crash log opens Android's share menu with our email address filled in, and nothing is sent unless you finish sending it. When you share, set a wallpaper, or open a photo or video in another app, Android sends that file to the app you pick. That app's own privacy policy then applies.

Third parties

Core Gallery contacts no third parties itself. Google Play handles the purchase, and Android's Google Play Store app checks it with Google Play when you first open the app.

Permissions

Purchases

Core Gallery is $2.99 with no trial, paid on Google Play. The app has no in-app purchases.

---

9. Core Music

Core Music is a mobile-first music library manager and HiFi player. Playback uses the files on your device. It does not stream, and it has no cloud library. No account is required. A network connection is not required.*

What stays on your device

Android backup

Android backup is turned on for Core Music. Android Auto Backup can include Music settings, EQ, the library index, ratings, hearts, play counts, the Network Features switches, your trial start date, and your unlock status. It does not include your music files or cached art and waveforms. Google runs that backup, not Core. You can turn it off in Android's backup settings.

Core Music saves the date your 14-day trial started in the app's private storage on this device. Android backup and Google Play services Block Store keep a copy for you. Block Store copies it to your Google backup only when Google can end-to-end encrypt it. That way, clearing data or reinstalling usually doesn't restart the trial. Google runs these, not Core; Core never receives the date.

What leaves your device

*A connection is optional. Core Music has two Network Features switches in Settings, Artwork lookup and Lyrics lookup. Both start off, and nothing is looked up until you turn one on. Library and playback work offline. Core Music has no crash-reporting SDK and no update check. Google Play's billing library may send its own diagnostic data to Google. Core receives none of it.

Those lookups work like this:

These services see your IP address and the search words needed to find a match.

Third parties

LRCLIB, MusicBrainz, and the Cover Art Archive, only when the matching switch is on and you start a lookup. Google Play Billing handles the purchase. Google Play services Block Store keeps a copy of the trial start date (see above).

Permissions

Purchases

Core Music offers a 14-day free trial, then a one-time $4.99 unlock through Google Play Billing. Google calls this kind of purchase a non-consumable one-time product: it is a single charge, it does not renew, and once bought it stays associated with the Google Account that bought it. Signing in on another device with the same Google Account is how the unlock is recognized again. Google's own terms allow a transfer between Google Accounts only when you own both accounts and Google has turned that transfer on for Play. (Payment, refund and card terms common to all apps are in section 2.)

---

10. Core Notes

Core Notes is a notes, calendar, and reminders app for Android: Encrypted Notes, Calendar, & Reminders. It supports text, checklist, photo, drawing, and audio notes, reminders, a calendar, a Clock with alarms, and widgets. No account is required. Everything Core Notes stores is encrypted on the device.

PDF attachments: PDFs you attach to a note are copied into Core Notes and stored encrypted on your device, the same way as your notes and images. They are never uploaded. When you export or share an attachment, Core Notes creates a decrypted copy and hands it to the app or location you choose; that copy is no longer protected by Core Notes.

Crash reports: if Core Notes crashes, it saves the error trace (no note text) to its private storage only, and can show it on a startup or lock screen with a Share button. Nothing is sent automatically. Share fills in our support address (gotocorepstx@gmail.com) and the subject Core Notes crash log; nothing is sent until you send it, and you can change or remove the address first.

No internet

Core Notes does not request Android's internet permission, so the app cannot connect to the internet. It has no crash-reporting SDK and does not fetch link previews.

What stays on your device

Encryption

Calendar import (optional, part of the unlock)

Calendar export

With the unlock, Calendar export creates a standard .ics file on your device. It goes only where you save or share it through Android's save or share screen. The .ics file is not encrypted.

PDF export

When you export a PDF, Core Notes reads any text it finds in your photos and drawings, on the device, and prints it as a caption under each picture. The text-recognition engine is built into the app, and nothing is uploaded.

Reminder sounds

Reminders can use the default sound, a system sound, or an audio file you pick. A file you pick stays where it is; Core Notes only keeps permission to play it. If it is moved or deleted, the default sound plays.

What leaves your device

Only what you send yourself. Backups and exports, including .ics calendar exports, are saved where you choose with Android's file picker. Sharing opens Android's share screen, and the receiving app's own policy then applies. Tapping a link opens your browser. Sharing a crash log (Crash report on the lock screen, Share crash log after a crash, or Settings › About › Crash log) opens Android's share screen with the log attached and our support address filled in, and nothing is sent unless you finish sending it.

Importing from other note apps

Core Notes checks whether Google Keep, Samsung Notes, Evernote, Simplenote, Standard Notes, or Joplin is installed, only so it can show import steps for those apps. It does not read their data. It imports only files you export and choose, or notes you share to it.

Third parties

None are contacted by Core Notes. Google Play Billing handles the optional unlock.

Permissions

Purchases

Core Notes is free. Encrypted notes, encrypted backups, the Quick Bar and Quick Box widgets, simple in-note reminders, and the Clock (alarms, timer, stopwatch, and world clock) are free. An optional $4.99 one-time unlock through Google Play Billing adds the calendar, repeating and advanced reminders, calendar and .ics import and export, and the Today and Month widgets. No subscription. The unlock is remembered on this device and works offline, and it never locks you out of notes you already have.

---

11. Core Scan

Core Scan is a document scanner for Android from Core Products & Services, LLC. It turns photos of pages into PDFs or JPGs on your device. No account is required.

No internet

Core Scan does not request Android's internet permission, so the app cannot connect to the internet. Your scans are not uploaded anywhere by Core Scan. Finding edges, cropping, filters, and text recognition all happen on your device. The first time you open Core Scan, and again after a reinstall, Android's Google Play Store app checks your Google Play purchase, so that start needs a connection. After that, Core Scan works offline. Core Scan has no crash-reporting SDK.

What stays on your device

Text recognition (optional, off by default)

Text recognition adds a hidden text layer so a saved PDF can be searched and its text selected. It is off until you turn it on. It runs entirely on your device using Tesseract, an open-source text recognition engine built into the app. All language files come with the app, so nothing is downloaded. When text recognition is on, Core Scan copies the files for the languages you choose into its private storage, and removes them when you turn a language or text recognition off. Those files hold none of your data. Core Scan does not keep a separate copy of the recognized text. It exists only inside the PDF you save.

What leaves your device

Only what you send yourself, plus one check: the first time you open Core Scan, and again after a reinstall, Android's Google Play Store app confirms your purchase with Google Play. Core Scan sends nothing itself, and Google's privacy policy applies to that check. When you share a scan, Android's share menu sends that file to the app you pick, and that app's own privacy policy then applies. Saved scans do not carry the location or camera details stored in an imported photo.

Third parties

Core Scan contacts no third parties itself. Android's Google Play Store app checks your purchase with Google Play. No third‑party ads. No analytics. No tracking.

Permissions

Purchases

Core Scan is a $4.99 one-time purchase on Google Play. No trial. No subscriptions. No in-app purchases.

---

12. Core Sign

Core Sign is a PDF reader with fill and sign tools for Android. Reading, saving, sharing, exporting, printing, and splitting PDFs are free. No account is required. Its vault is encrypted. The rest of the app is not.

No internet

Core Sign does not request Android's internet permission, so the app cannot connect to the internet. Your documents and signatures are not uploaded anywhere by Core Sign. All processing happens on the device.

What stays on your device

Vault

Your signatures, initials, and the documents you store in the Vault are encrypted with AES-256-GCM. The key stays in the Android keystore and is wrapped by a PIN or pattern you set, or a strong biometric if you turn it on. Your PIN or pattern always works too. Storing a document in the vault stores a copy; your original file is not deleted. When you open a vault document, the decrypted working copy is removed when you close it, and any copy left by a crash is cleared the next time the app starts. Documents you are working on outside the vault, and files you export, are not encrypted. Your PIN or pattern cannot be recovered. Repeated wrong attempts add a growing wait, up to 15 minutes.

What leaves your device

Only what you send yourself. When you share, export, or print, Android sends the file to the app or printer you pick, and that app's own policy then applies. If you link a file that a cloud storage app provides, Core Sign reads it, and writes or deletes it only when you choose to, through that app, which may sync the change under its own policy. Sharing a crash log opens Android's share menu with our email address filled in, and nothing is sent unless you finish sending it.

Third parties

None are contacted by Core Sign. Google Play Billing handles the optional unlock.

Permissions

No permissions to grant. Core Sign opens the PDFs, folders, and images you choose through Android's file picker. For a Link, Android lets Core Sign keep access to that file or folder until you remove it from Core Sign. The install-time permissions are Google Play billing, used for the unlock, and biometric, used only if you turn on biometric unlock for the vault.

Purchases

Core Sign is free to read, save, share, export, print, and split, and folders are free. A $9.99 one-time unlock through Google Play Billing adds filling, signing, markup, form filling, redaction, page tools (rotate, duplicate, delete, extract, reorder, insert), the vault, and merging. No trial. No subscription. The unlock stays associated with the Google Account that bought it.

---

13. Core Utilities

Core Utilities is a set of everyday tools that use the device's own sensors and math. No account is required. After the first launch, every tool works offline except the network tools (Speed Test, Wi-Fi File Share, and the FTP client), which are off until you turn on Network tools in Settings. The first launch needs a connection so Android's Google Play Store app can confirm your purchase.

Speed Test log: if a Speed Test fails, Core Utilities saves the step that failed and the error details in its private storage on your device to help explain the failure, not in Download or shared folders. It is never uploaded by Core. Core Utilities does not keep your Speed Test results. M-Lab keeps a copy of every test, as described under Network tools.

What stays on your device

Pictures and videos

The Image & Video tools (Vectorize, Compress & Resize, Strip Metadata, Trim Video, Video to GIF/WebP, and Color Picker) and QR Code open only the files you choose, through Core Gallery or Android's picker, and process them on this device. Nothing is uploaded. The original file is not changed. Each result is saved as a new file in folders other apps on this device can see: pictures and GIFs in Pictures/Core Utilities Images, videos in Movies/Core Utilities Videos, and SVG drawings in Documents/Core Utilities Vectors (on Android 8 and 9, the system Save screen opens instead). Core Utilities does not ask for permission to read your photos.

Microphone

Used only while Sound Meter is open, to measure loudness. Nothing is recorded, saved, or sent.

Network tools (off by default)

Turn them on in Settings › Network tools.

Third parties

Measurement Lab (M-Lab), only when you run Speed Test. The FTP client connects only to servers you choose yourself. Android's Google Play Store app confirms your purchase with Google Play when you first open the app, and again after the confirmation expires. Core Utilities contacts no other third parties.

Permissions

Purchases

Core Utilities is a $2.99 one-time purchase on Google Play. No trial. No subscription. No in-app purchases. The first time you open Core Utilities, it checks your Google Play purchase, and you can't use it until the check succeeds. After that, every tool works offline except the network tools.

---

14. Core Weather

Core Weather is provided free of charge. It shows Dual °F/°C for a place entered by the user, or for the device location only if Detect is chosen. Detect is one-shot and opt-in. It is not continuous tracking, and it is not saved as a profile. Core Weather requires a connection for the forecast, place search, and alerts.

What stays on your device

What leaves your device

Core Weather needs the internet. All requests use HTTPS. Every request goes straight from your device to the service, so that service sees your IP address. Requests also carry a User-Agent label that names Core Weather.

Third parties

MET Norway, Nominatim / OpenStreetMap, Zippopotam.us, U.S. Census Geocoder, U.S. National Weather Service, plus forecast.weather.gov or Windy.com only when you tap a link. Core has no control over their logs.

Permissions

Purchases

None. Core Weather is free and has no in-app purchases.

---

15. Core Workout

Core Workout is a paid exercise interval timer for Android. It runs timers on the device for formats such as EMOM, AMRAP, Interval, Tabata, For Time, HIIT, Custom, Saved workouts, and chained workouts. No account is required. Voice cues and workouts stay on the device. Timing a workout does not require a network connection.

Network

Core Workout does not request Android's internet permission, so the app cannot connect to the internet. Android's Google Play Store app handles the one-time unlock and its license checks. Workouts, cues, and timers are not uploaded. Day-to-day timing does not need a network connection. Core Workout has no crash-reporting SDK.

What stays on your device

Core Workout saves the date your 14-day trial started in the app's private storage on this device. Android backup and Google Play services Block Store keep a copy for you. Block Store copies it to your Google backup only when Google can end-to-end encrypt it. That way, clearing data or reinstalling usually doesn't restart the trial. Google runs these, not Core; Core never receives the date.

Backup and restore

Optional Backup and Restore use Android's system save and open sheets. Backup writes a CoreWorkout-backup.json file you choose a location for. Restore reads a file you pick and merges saved workouts by id. Core does not upload that file. A file that is not a Core Workout backup changes nothing.

What leaves your device

Only purchase and license checks, handled by Android's Google Play Store app. Android backup and Google Play services Block Store can keep a copy of your trial start date, as described above. A backup file you save can leave the device only if you copy or share it yourself. A crash log leaves the device only if you share it through Android's share menu.

Third parties

Google Play Billing handles the one-time purchase and related license checks. Google Play services Block Store keeps a copy of the trial start date. Core Workout contacts no other third parties.

Permissions

Purchases

Core Workout offers a 14-day free trial, then a one-time $4.99 unlock through Google Play Billing. There is no subscription. The unlock stays associated with the Google Account that bought it.

---

16. Trio Live Wallpapers

Trio Live Wallpapers is a live wallpaper app for Android from Core Products & Services, LLC. It sets your GIFs, videos, and photo slideshows as live wallpapers. No account is required.

No internet

Trio Live Wallpapers does not request Android's internet permission, so the app cannot connect to the internet. Trio itself never sends anything from your device. The purchase check is made by Android's Google Play Store app. The first time you open Trio, it checks your Google Play purchase; the wallpaper stays blank until then. After that, it works offline. Tapping the Privacy link opens your browser.

What stays on your device

What leaves your device

Only what you send yourself, plus one check: the first time you open Trio, Android's Google Play Store app confirms your purchase with Google Play. Trio sends nothing itself. The crash log is never sent automatically. Settings › About › Crash log opens Android's share menu with our email address filled in, and nothing is sent unless you finish sending it.

Third parties

Trio Live Wallpapers contacts no third parties itself. Android's Google Play Store app checks the purchase with Google Play. No third‑party ads. No analytics. No tracking.

Permissions

Purchases

Trio Live Wallpapers is a $4.99 one-time purchase on Google Play. No trial. No subscriptions. No in-app purchases.