PhotoNotes is built for the field — no weird accounts, no fine print. Here’s the straight story: what the app does… and what it doesn’t.
What PhotoNotes doesn’t do
No signup, no password.
No ads.
Doesn’t sell or hand your data to third parties.
Doesn’t need internet to work: formulas, stories, and your notes live on the phone.
What gets stored (and where)
Only on this device:
Your alias and gear (camera, lenses, accessories).
Notebook notes and camera presets (C1, C2, and C3).
If you use “Reset data” (in PhotoBones, inside the app), you can wipe it all.
This site (photobones.com) has no user accounts — read-only, plus the app download.
Android permissions
Version 1.2.4 is signed and doesn’t ask for “scary” camera, mic, contacts, or location permissions.
You can export or share a note when you choose (e.g. save a CSV or open the system share sheet). You’re in control every time.
How to check the APK is the real one
Each published build has a SHA-256 fingerprint. If your download matches, it’s the same file we shipped.
PhotoNotes 1.2.4:
dc8e4aa7f270629b9bf14b4a99e137d396370e13182c79d85f08aba1c4a480aa
It’s also signed with our certificate. Certificate SHA-256 fingerprint:
03:17:F6:3C:68:A4:2F:00:D3:A2:EB:04:7C:80:84:DD:82:3B:42:48:24:AF:CA:FF:3E:5A:57:CA:CD:09:8E:63
You can also check the public analysis of this APK on VirusTotal.
Safe download
Always grab it from photobones.com or official GitHub Releases (same SHA-256). Skip copies forwarded in chats or random sites.
The site uses HTTPS. The app ships as a signed release APK.
Chrome and Play Protect often show one or two warnings when you download and install (“may be harmful”, “app blocked”). That’s because we’re not on Google Play — not because the APK is broken. On Samsung, «Install anyway» is often tucked under «More details». Only download from this site or official GitHub and compare the SHA-256.
Contact
Questions about privacy or security: photobones.notes@gmail.com