Contacts and Notes Pro Privacy Policy

Who is responsible

The controller for Contacts and Notes Pro is Pera Meta B.V., Minervalaan 33, 1077 NL Amsterdam, the Netherlands, KvK 42015001. PeraByte Labs is a brand of Pera Meta B.V. For anything about privacy, write to [email protected].

What the app keeps on your phone

• Your notes, labels, settings and your own card, in a file in the app's storage on your phone. There is no account and no sign-up, and we have no copy.
• A copy of each note in that contact's own Notes field, in the address book you picked: iPhone Contacts on your phone, or your Google account (see below). It then goes wherever that address book already syncs, under your own settings.
• Your voice, only while you speak. Speech is turned into text on the phone by Apple's on-device speech recognition. The audio is not uploaded and not kept.
• Your contacts, read and written on the phone through Apple Contacts, so a note lands on the right person.
• Reminders, only if you allow it. The app creates reminders for the to-dos in your notes, on the phone, through Apple's reminders framework. Nothing is uploaded. The app does not use your calendar.
• Business cards you scan (Pro). The camera and Apple's on-device text recognition read the card into a new contact. The photo is not kept and not sent anywhere.
• A diagnostics log of app events (for example "note saved", "sync failed") and Apple's crash reports for the app, with no note text, transcripts or contact details. It stays on your phone and only reaches us if you choose to send it (see below).
• If you connect Google, your Google sign-in token and the email address of the connected account, in the iOS Keychain on your phone.

You can erase everything in the app at any time with Settings, Delete all my data. Deleting the app removes it too.

What leaves your phone

• AI Enhancement (Pro, and only after you agree to it in the app). When you use it, the app sends the text of that one note, never the audio and nothing from your address book, to our server function (Supabase, in the EU). Our server passes the text to our AI model provider, Anthropic (Claude), and sends the result straight back to your phone. The app also names the provider on the consent screen and under Settings, Privacy & security.
  
  We use only its paid business API, under terms that do not allow it to use your text or the result to train or improve its models. The provider may keep requests for a limited period (at most 30 days) to detect and prevent abuse and to meet legal requirements, and then deletes them. Anthropic may process the text outside the EU, under the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. We store no note text and no result. Supabase, which runs our server, keeps its own short-lived technical request logs, as any host does. If we change provider, the app asks for your agreement again before it sends anything to the new one.
  
  To keep the AI affordable and fair, our server counts requests. It keeps one anonymous total per day across all users, and one count per subscription per day. That second count is stored under a one-way code made from Apple's subscription number and the date: it changes every day, cannot be turned back into the number, is never linked to you, and is deleted the next day. If Apple tells us a subscription was refunded, we keep a one-way code of it (never the number itself) so AI stops working for that subscription. In short: Note text is processed in transit and never stored at rest by us. We keep a daily count per subscription under a one-way code, plus an anonymous daily total. Anonymous TelemetryDeck usage counts can be switched off in Settings. Google sync and integrations go directly from your phone to that service.
• Better accuracy (optional, Pro). If you turn it on, the app downloads a speech model (about 626 MB) once from Apple, or from Hugging Face, Inc. when Apple's copy is not available. Like any download, this shows that server your device's IP address. No notes, audio or account details are sent. The model runs on your iPhone, and your voice never leaves it.
• Proof of Pro. To confirm Pro for an AI request, the app sends Apple's signed purchase record along with it. Our server checks it in memory and does not store it. It carries no name and no card details.
• Your subscription. Apple handles the purchase and tells the app only whether Pro is active. We never see your name, card or Apple Account.
• Google contacts, only if you choose Google as your contact source. The app then talks directly from your phone to Google's People API, inside your own Google account. See Google user data below.
• Anonymous usage counts, unless you turn them off in Settings, Privacy & security, Share anonymous usage. The app sends a short, fixed list of events (for example "onboarding page viewed", "permission granted", "first note saved", "paywall shown") to TelemetryDeck, an analytics service based in Germany built for privacy. The events hold no note text, no names and no contact details. TelemetryDeck receives them with a random identifier that is hashed on the phone, so neither it nor we can tell who you are, and it is never used to follow you across other apps or websites. We use it only to see where the app is confusing and to improve it.
• Crash reports and email you choose to send. If the app closed unexpectedly, it asks once whether to send the crash report. If you say yes, your own mail app opens a draft to [email protected] with the diagnostics file attached; it is sent only when you press send. Questions and feedback you email us work the same way.
• Things you share. A note you share (for example by email or Messages) goes where you choose to send it.

There is no advertising and no tracking in the app, and we sell nothing. The only third-party code that sends data is TelemetryDeck, described above. If you turned on Share with App Developers in your iPhone's settings, Apple may share anonymised crash reports with us; those come from Apple, under Apple's terms.

Google user data

This section applies only if you choose Google as your contact source and sign in with Google. The app asks for one Google permission, to see and edit your contacts (auth/contacts), plus your Google account's email address so Settings can show which account is connected.

• What the app accesses. Your contacts and contact groups (names, company, photos, phone numbers, email addresses, birthdays and the Notes field), and the email address of the signed-in account.
• How it is used. Only to provide the features you use: listing your contacts, attaching notes to the right person, writing your notes into that contact's Notes field, creating or editing a contact when you ask, and adding people to or removing them from groups. All of this runs between your phone and Google's People API. It is never used for advertising, never sold, and never used to develop, improve or train AI or machine-learning models.
• Who it is shared with. We do not share, transfer, sell or disclose Google user data to anyone, and our servers do not receive your contact list. There is one exception, and only if you turn on the Pro AI features and use them: the text of the note you are enhancing (which can include a note that came from a Google contact's Notes field) is sent through our server function (Supabase, EU) to our AI model provider to produce the result, as described under What leaves your phone. Neither we nor Supabase store it; the provider does not use it for training and keeps it only for a limited period for abuse monitoring. Beyond that, Google user data is disclosed only if the law requires it. No human at PeraByte Labs reads your Google data.
• How it is protected. Every connection, to Google and to our server, is encrypted in transit with HTTPS (TLS). Your Google sign-in token is stored only in the iOS Keychain on your phone, which iOS encrypts and keeps to this app. Everything the app stores on your phone, including its cached copy of your Google contacts, is encrypted at rest by iOS Data Protection, inside the app's own sandbox where other apps cannot read it; your notes use the strictest class, unreadable while the phone is locked. Our server function holds no Google data at rest; its keys are kept as server-side secrets and never ship in the app. Only the publisher's own accounts can administer the Google Cloud project that owns this app.
• How long it is kept, and deleting it. Google data stays on your phone only while you use Google as your source. Signing out of Google in the app's Settings revokes the app's access token and deletes it from the Keychain; deleting the app removes everything it stored. You can also revoke access at any time at myaccount.google.com/permissions. Notes the app wrote into your contacts' Notes fields stay in your Google account until you remove them there.
• Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Legal basis and how long we keep it

The AI features run on your consent (Article 6(1)(a) GDPR). You can withdraw it at any time by turning AI Enhancement off in the app's Settings, and nothing is sent after that. We keep no text from those requests, so there is nothing to delete; the daily counts described above are deleted the next day. Anonymous usage counts rely on our legitimate interest in improving the app (Article 6(1)(f) GDPR), and you can switch them off at any time in Settings. If you email us, we use your message to answer you, on the basis of our legitimate interest in supporting the app (Article 6(1)(f) GDPR), and we delete it within 24 months of the last contact.

Your rights

You have the right to access, correct, erase or restrict the processing of your personal data, to object to it, and to receive it in a portable form. Most of it lives only on your phone, where you control it directly: Settings, Privacy & security, Export notes gives you a copy of all your notes as a file, and Settings, Delete all my data erases them. For anything you sent us, write to [email protected] and we will answer within a month. You can also complain to the Dutch data protection authority, theAutoriteit Persoonsgegevens.

This website

contactsandnotespro.perabytelabs.com is hosted by Vercel, with DNS and network protection by Cloudflare. Like any web host they process your IP address and the page requested to deliver the site and keep it secure. The site sets no cookies. It uses Vercel Web Analytics to count page visits; it works without cookies and does not identify you.

Children

Contacts and Notes Pro is a productivity app for adults and is not directed at children under 13.

Changes

If this policy changes, the new version appears here with a new date. If a future version of Contacts and Notes Pro ever sent more data about you off your phone, we would say so here, in plain language, before it shipped.