Privacy Policy

1. Information we collect

Information that stays on your device

Device contacts. When you grant contacts access, Contacts Pro searches your address book locally on your device to match your query. Your contacts are not transmitted to our servers, and we never store or receive them.

Information you provide or generate

• Account identity. If you choose to sign in, we use Sign in with Apple. We receive a stable Apple user identifier (the Apple “sub”) and, only on your first authorization and only if you choose to share it, your email address (which may be Apple’s private-relay address). We do not receive your Apple password.
• Web search queries. When you ask Contacts Pro to look someone up on the web, your search text is sent to our backend and to our AI provider (OpenAI) to generate results. We don’t keep the search text; how long OpenAI keeps it is in section 5.
• Voice input. Voice search is transcribed entirely on your device, using Apple’s on-device speech recognition. Your audio recording is never uploaded — not to us and not to any third party. Matching against your address book also happens on your device; your contacts are never uploaded. If you then run a web lookup, the resulting search text is sent as described above — and where no contact on your device matched what you said, that search text is the transcription itself.
• Subscription and transaction data. If you subscribe, Apple processes your payment. We receive and store a signed transaction record and your subscription status so we can enforce the correct plan limits. Purchases are bound to your account using a one-way derived token (a UUID computed from your Apple identifier); this token cannot be reversed to reveal your identifier. We do not receive your full payment-card details.

Information collected automatically

• Usage metering. We count the number of billable web searches you make in each monthly period so we can enforce your plan’s limit. We store the count and a short-lived request key used to prevent double-counting retried requests.
• Technical data. Like most internet services, our servers automatically process your IP address and basic request metadata to route traffic, apply rate limits, prevent abuse, and keep the Service secure.
• Anonymous usage statistics. From version 1.7, the app sends statistics about how it is used. They never include what you search for or say, or anything from your contacts, and you can turn them off. Section 2 describes them.

2. Anonymous usage analytics

From version 1.7, Contacts Pro sends anonymous usage statistics so that we can see which features are used and where searches fail, and fix what matters most. They are processed by TelemetryDeck, an analytics service run by TelemetryDeck GmbH in Germany. You can turn them off at any time (see “Your choice” below).

What the statistics contain

• What happened in the app, and how it ended, recorded as values from fixed lists: for example, that a search was typed or spoken and whether it found results, or that a call was started from a result.
• Counts and durations: counts rounded into ranges on your device (for example, 2–3 results), and how long steps took, such as a search.
• Categories worked out on your device from a search, never the search itself: its writing system (for example, Latin or Hebrew), whether it has one, two, or three or more words, and whether it looks like a name, a phone number or an email address.
• The state of the app: whether it is used on the iPhone or in CarPlay, your plan (Standard, Plus or Max), whether you are signed in, the status of the contacts permission, and a few facts about this installation’s history, such as whether it has ever used voice search or CarPlay.
• Technical details that TelemetryDeck’s software adds to every statistic: the app version, the device model and iOS version, the screen size, your language, region and time zone, display and accessibility settings (such as text size, dark mode or reduced motion), the local date and hour, whether the app came from the App Store or TestFlight, and usage counters kept on your device, such as the number of sessions and the date of the first one.
• Identifiers: a random identifier for each session, and one for this installation, made on your device as a one-way hash of the identifier iOS assigns to our apps, combined with a fixed value of ours. It is not linked to your account, it is not an advertising identifier, and it is reset when you remove our apps from your device.

What they never contain

• What you type or say: search text, transcripts, recordings or recent searches.
• Anything from your contacts (names, phone numbers, email addresses, postal addresses or notes), or statistics about your address book, such as how many contacts it holds.
• Anything from web results, such as business names, websites or addresses.
• Your name, email address, Apple account identifier or anything else that identifies your account, and the text of error messages. (Your plan and whether you are signed in are sent, as listed above.)
• Your IP address (see below).

These limits are built into the app’s code, which can only send values from fixed lists, and we check the app’s network traffic before releases that change what it sends.

How they travel

The app sends the statistics to our server at contacts-pro.app, which passes them on to TelemetryDeck unchanged and without your IP address, so TelemetryDeck never receives it. Our server handles these requests like any other (see “Technical data” in section 1): it records the size of each batch and whether it was delivered, never its content, and keeps a temporary count of requests per IP address, used only to prevent abuse.

How long they are kept

TelemetryDeck keeps the statistics for at least 24 months and has not set a date by which older statistics are deleted. We can see the most recent 3 months of them (24 months on a paid TelemetryDeck plan); older statistics stay in TelemetryDeck’s storage, where we can’t access them. We can have all of the app’s statistics deleted by deleting our organization at TelemetryDeck; deleting only part of them isn’t possible yet.

Because the statistics carry no name, account or contact detail, we can’t tell which of them came from your device, so we can’t show them to you or delete them one by one. Deleting your Contacts Pro account doesn’t affect them, because they were never linked to it.

Your choice

Sending is on by default. To stop it, turn off Settings → Privacy → Share anonymous usage statistics in the app. Sending stops from that moment, on the iPhone and in CarPlay, although statistics already waiting to be sent may still go out. You can turn it back on at any time.

3. How we use information

• to provide, maintain, and improve the Service and its search results;
• to understand how the app is used, find where it fails, and decide what to improve, using the anonymous usage statistics described in section 2;
• to authenticate you and keep your account secure;
• to process subscriptions and enforce the usage limits of your plan;
• to prevent fraud, abuse, and violations of our Terms, and to protect the Service;
• to comply with legal obligations and enforce our agreements.

We do not sell your personal information, and we do not use your search queries to build advertising profiles. We never receive your voice recording.

4. How information is shared

We share information only with the service providers that help us operate the Service, and only as needed for them to perform their function:

TelemetryDeck receives only anonymous statistics, which it cannot link to a person.

We may also disclose information if required by law, to respond to lawful requests, to protect the rights, safety, and property of Kiloma Advanced Solutions or others, or in connection with a merger, acquisition, or sale of assets (in which case we will require the recipient to honor this policy).

5. Data retention

We keep account and subscription records for as long as your account is active and as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Usage counters are retained only for the current and immediately preceding billing periods. We hold no voice recordings to retain — audio never leaves your device. We don’t keep the text of your web searches. OpenAI, which generates web-lookup results, keeps API requests for up to 30 days (longer only where the law requires it or to protect its services or others from harm) and does not use them to train its models. When you delete your account, we delete the associated data as described below. The anonymous usage statistics are kept as described in section 2.

6. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. Residents of the European Economic Area and the United Kingdom have these rights under the GDPR/UK GDPR; California residents have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. We do not sell or “share” your personal information as those terms are defined under California law.

• Contacts permission. You can grant or revoke contacts access at any time in your device Settings.
• Usage statistics. You can turn off the anonymous usage statistics at any time in the app (Settings → Privacy). See section 2.
• Account deletion. You can delete your account from within the app (Settings → Delete Account). This revokes your Sign in with Apple session and deletes your account identity, session tokens, usage counters, and subscription entitlement records from our systems. Your device contacts are never affected. A paid subscription is cancelled separately through the App Store.
• Other requests. To exercise any right, contact us at privacy@kiloma.com. We may need to verify your identity before acting on a request.

7. Legal bases for processing (EEA/UK)

Where the GDPR applies, we process your information: to perform our contract with you (to provide the Service and your subscription); based on your consent (for example, contacts access and, on first sign-in, sharing your email); to comply with legal obligations; and for our legitimate interests in operating, securing, and improving the Service, provided those interests are not overridden by your rights. The anonymous usage statistics described in section 2 rely on our legitimate interest in finding problems and improving the app; you can object at any time by turning them off in the app’s Settings.

8. International transfers

We and our service providers may process your information in countries other than the one in which you live, including the United States. Where required, we rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) for such transfers.

9. Security

We use technical and organizational measures designed to protect your information, including encryption in transit, scoped access tokens, and rotating credentials. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Contact

Kiloma Advanced Solutions is the controller of your personal information. For privacy questions or requests, contact privacy@kiloma.com. For general support, contact support@kiloma.com.