Privacy Policy

Last updated: October 13, 2026

This policy explains what information the Washi apps — Washidoc (a PDF editor) and Washipad (a sticky-note wall) — and the washidoc.com / washipad.com websites collect, why, and what choices you have. Washi is operated by SoriStory LLC (“Washi,” “we,” “us”).

Our starting point is to collect as little as possible. Your content lives on your device. Washipad can also sync it through your own iCloud, which we cannot read. Your content only reaches our servers if you choose a cloud feature — Washidoc’s cloud backup or a Washipad Cloud subscription — as described below.

Contents
  1. Information we collect
  2. How we use it
  3. Who we share data with
  4. Subscriptions & payments
  5. How long we keep it
  6. Your rights & choices
  7. Deleting your data
  8. Security
  9. Children
  10. International transfers
  11. Changes
  12. Contact

1. Information we collect

Content you create

In Washipad, the notes, checklists, photos and collections on your wall are stored on your device. On iPhone and iPad they also sync through your own private iCloud (Apple’s CloudKit), free for everyone. That copy lives in your iCloud account, counts against your iCloud storage, and cannot be read by us. Android has no iCloud.

If you subscribe to Washipad Cloud, your note text, checklists, photos (the full image and a smaller thumbnail) and collections are also stored on our servers in Google Firebase, tied to your Washi account, so they sync across iPhone, iPad and Android and appear in the web app at app.washipad.com. This copy is encrypted in transit and at rest by Google, but it is not end-to-end encrypted: like Washidoc’s cloud backup, it is stored in a form our systems can read.

If your Washipad Cloud subscription lapses, syncing through our servers pauses. Nothing is deleted: the stored copy stays, so you can still read it at app.washipad.com, and syncing resumes if you subscribe again. To remove it, delete the notes or your account (see section 7).

In Washidoc, the documents, PDFs, text and photos you create or import are stored only on your device by default. If you turn on cloud backup and sync (part of the optional Cloud subscription), that content is stored on our cloud infrastructure so it can be backed up and synced across your devices.

Account information

If you create an account, you can use Sign in with Apple or Sign in with Google. From Apple we receive a stable, app-specific user identifier and — only if you choose to share it — your name and an email address (which may be Apple’s private relay address). From Google we receive your Google account identifier, name, and email address. We never receive your Apple or Google password. On Android, sign-in currently uses Google only.

Whichever provider you use, we store an account identifier of our own to associate your content, backup, and purchase status with you. In Washipad, the account carries no notes unless you subscribe to Washipad Cloud.

The Washipad web app at app.washipad.com uses the same sign-in, through Firebase Authentication.

Purchase information

Washipad is free. Its only purchase is the optional Washipad Cloud subscription. Washidoc offers a one-time unlock and an optional Cloud subscription.

Purchases in both apps are made through Apple’s App Store or Google Play. Our server verifies each purchase with Apple or Google and stores what it needs on your account record — the product, the store’s transaction identifier, and when a subscription expires — so the paid features unlock on every device where you sign in to the same account. We do not receive your full payment card number or billing address.

Advertising

Neither app shows ads, and neither contains an advertising SDK that runs. No advertising identifier is read, no approximate location is collected for advertising, and nothing about you is shared with an ad network, whether or not you have bought anything.

Because there is no ad network, there is nothing here to opt out of: you will not see an App Tracking Transparency prompt or a consent form for advertising, and there is no “sale” or “share” of personal information for advertising under California’s CCPA/CPRA or equivalent laws.

Your documents, notes, photos and scans have never been used for advertising and are not sent to any ad network.

Document conversion Washidoc Cloud

The Washidoc Cloud subscription includes an optional Convert to Word / Excel feature. When you use it, the document you chose (with any redactions already applied) is sent to our server and processed by Google Vertex AI (Gemini) on Google Cloud to reconstruct its structure as an editable file, which is returned to your device. The document is processed only to perform the conversion you requested — it is not used to train AI models and is not retained after the conversion completes. Documents you don’t convert are never sent. We keep a per-account daily count of conversions (a number, not the documents) to prevent abuse.

Diagnostic information

We may collect basic, non-identifying crash and error information to keep the apps stable. We do not sell your personal information for money, and we do not track you across other companies’ apps and websites.

How the apps are used

If you have an account, we keep a small amount of information about your use of the app itself — when you last used it, which platform you used it on, which of the Washi apps your account has opened, and how far you have got in setting it up (for example, whether you have backed up for the first time). We use this only to understand whether the apps are working and worth continuing, never to profile you.

This is about the app, not about your content: it never includes the text of a note, the name or contents of a document, or a file you opened. If you don’t have an account, none of it is collected.

Reminders & notifications

Reminders you set on a note Washipad or a document Washidoc are scheduled as local notifications on your device. Scheduling a reminder does not send that note or document to us. If you choose "Add to Calendar", we place a single event in your own device calendar using the item's title and time — this is written to your calendar, not sent to us, and we never read your calendar.

This website

Everything above is about the apps. This website is separate, and collects less.

The Washipad web app at app.washipad.com is part of Washipad Cloud, not of this website, and has no analytics. It signs you in through Firebase Authentication, reads and writes the same Washipad Cloud data as the apps, and keeps your sign-in and one display preference in your browser’s storage.

Our home page and our bio-links page use Google Analytics 4 to count visits and see which pages people read. Google Analytics sets its own cookies in your browser and receives your IP address, approximate location (city level), and basic device and browser details. We have deliberately turned Google Signals off and ad personalization off, so this data is not joined to a Google advertising profile and is not used to target ads at you anywhere. We use it only to see whether anyone is finding the site.

If you reach us from a link in one of our social media profiles, a small marker naming which network sent you (for example “instagram”) is kept in your browser’s session storage and is erased when you close the tab. When you then tap App Store or Google Play, that same marker is added to the store link, so Apple and Google can tell us how many installs came from that network. Those reports are counts only and never identify you.

Our legal pages — this one, Terms, Support, and Delete your account — carry no analytics at all. You can read them without being counted.

To opt out of Google Analytics everywhere, you can install Google’s opt-out browser add-on, or block cookies for this site in your browser settings. Nothing on this site requires them.

2. How we use information

Where required by law, we rely on your consent (e.g. optional features), the performance of our agreement with you (providing the apps), and our legitimate interest in keeping the service secure and functioning.

3. Who we share data with

We don’t sell your personal information. We share data only with service providers who help us run the apps, and only as needed:

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the service.

4. Subscriptions & payments

Washipad is free. Its optional Washipad Cloud subscription costs $0.49/month or $4.99/year.

Washidoc offers a one-time unlock and an optional Cloud subscription.

In both apps, purchases, billing, renewals and cancellations are handled by Apple or Google under your App Store or Google Play account; manage or cancel a subscription anytime in your device’s Settings or in Google Play. The one-time unlock does not renew. What you have bought follows your account rather than your device — sign in with the same account on another device, including Android, and those features unlock there too. See our Terms of Use for details.

5. How long we keep information

Content stored only on your device remains until you delete it or remove the app. Content you back up to the cloud — including Washipad Cloud content, which stays even after a subscription lapses — is kept until you delete it or close your account. Account information is kept while your account is active. After account deletion, we delete or anonymize associated data within a reasonable period — the only thing we keep is the anonymous deletion record described in section 7 — except where we must retain it to comply with law.

6. Your rights & choices

Depending on where you live (e.g. the EEA/UK under GDPR, or California under the CCPA/CPRA), you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can exercise these rights by contacting us (below). You will not be discriminated against for exercising them.

7. Deleting your data

You can delete individual documents and notes in the app at any time. You can delete your entire account — and the data associated with it — from within the app (Settings → Account → Delete Account), or by contacting us. Removing the app from your device deletes the content stored locally on that device.

When you permanently delete a Washipad note, its content is removed from Washipad Cloud; a small marker without the note’s content stays, so your other devices know it was deleted. Its photos may remain in storage until they are cleaned up. Deleting your Washi account deletes all of it — notes, markers, collections and photos.

Your Washipad iCloud copy lives in your own Apple account, not with us, so deleting your Washi account does not remove it. You manage it in your device’s iCloud settings.

For step-by-step instructions, and to request deletion if you can’t get into the app, see Delete your account.

When you delete your account, we keep a single anonymous statistical record that a deletion happened: the week it occurred, roughly how long the account existed, which of the Washi apps it had used, the platform and sign-in method, and whether it had bought anything. This record contains no name, no email address, no account identifier, and no content, and it cannot be linked back to you. It exists so we can understand, in aggregate, why people leave.

8. Security

We use industry-standard measures to protect your information, including encryption in transit (TLS) and encryption at rest for content stored in the cloud. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Children

The apps are not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

10. International transfers

We and our service providers may process and store information in the United States and other countries, which may have different data-protection laws than yours. Where required, we use appropriate safeguards for such transfers.

11. Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above and, for material changes, provide a more prominent notice. Continued use of the apps after an update means you accept the revised policy.

12. Contact us

Questions or requests about this policy or your data:
SoriStory LLC
30 N Gould St Ste R
Sheridan, WY 82801, USA
support@washidoc.com