Note And Todo application needs no permission to work. but if the user wants to use an extra option which is attaching the location to the note he or she can give the permission and use the option. the other parts of the app are fully functional without any permission.
Note And Todo application is totally offline and does not collect any data of the users and does not have an internet connection to send any data to an external database. so keep calm and use the application without being worried about your personal data.