Privacy Policy

1. Information we collect

Information that stays on your device

Device contacts. When you grant contacts access, Contacts Pro searches your address book locally on your device to match your query. Your contacts are not transmitted to our servers, and we never store or receive them.

Information you provide or generate

• Account identity.If you choose to sign in, we use Sign in with Apple. We receive a stable Apple user identifier (the Apple “sub”) and, only on your first authorization and only if you choose to share it, your email address (which may be Apple’s private-relay address). We do not receive your Apple password.
• Web search queries. When you ask Contacts Pro to look someone up on the web, your search text is sent to our backend and to our AI provider to generate results.
• Voice input. Voice search is transcribed entirely on your device, using Apple’s on-device speech recognition. Your audio recording is never uploaded — not to us and not to any third party. Matching against your address book also happens on your device; your contacts are never uploaded. If you then run a web lookup, the resulting search text is sent as described above — and where no contact on your device matched what you said, that search text is the transcription itself.
• Subscription and transaction data. If you subscribe, Apple processes your payment. We receive and store a signed transaction record and your subscription status so we can enforce the correct plan limits. Purchases are bound to your account using a one-way derived token (a UUID computed from your Apple identifier); this token cannot be reversed to reveal your identifier. We do not receive your full payment-card details.

Information collected automatically

• Usage metering.We count the number of billable web searches you make in each monthly period so we can enforce your plan’s limit. We store the count and a short-lived request key used to prevent double-counting retried requests.
• Technical data. Like most internet services, our servers automatically process your IP address and basic request metadata to route traffic, apply rate limits, prevent abuse, and keep the Service secure.

2. How we use information

• to provide, maintain, and improve the Service and its search results;
• to authenticate you and keep your account secure;
• to process subscriptions and enforce the usage limits of your plan;
• to prevent fraud, abuse, and violations of our Terms, and to protect the Service;
• to comply with legal obligations and enforce our agreements.

We do not sell your personal information, and we do not use your search queries to build advertising profiles. We never receive your voice recording.

3. How information is shared

We share information only with the service providers (“sub-processors”) that help us operate the Service, and only as needed for them to perform their function:

We may also disclose information if required by law, to respond to lawful requests, to protect the rights, safety, and property of Kiloma Advanced Solutions or others, or in connection with a merger, acquisition, or sale of assets (in which case we will require the recipient to honor this policy).

4. Data retention

We keep account and subscription records for as long as your account is active and as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Usage counters are retained only for the current and immediately preceding billing periods. We hold no voice recordings to retain — audio never leaves your device. When you delete your account, we delete the associated data as described below.

5. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. Residents of the European Economic Area and the United Kingdom have these rights under the GDPR/UK GDPR; California residents have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. We do not sell or “share” your personal information as those terms are defined under California law.

• Contacts permission. You can grant or revoke contacts access at any time in your device Settings.
• Account deletion.You can delete your account from within the app (Settings → Delete Account). This revokes your Sign in with Apple session and deletes your account identity, session tokens, usage counters, and subscription entitlement records from our systems. Your device contacts are never affected. A paid subscription is cancelled separately through the App Store.
• Other requests. To exercise any right, contact us at privacy@kiloma.com. We may need to verify your identity before acting on a request.

6. Legal bases for processing (EEA/UK)

Where the GDPR applies, we process your information: to perform our contract with you (to provide the Service and your subscription); based on your consent (for example, contacts access and, on first sign-in, sharing your email); to comply with legal obligations; and for our legitimate interests in operating, securing, and improving the Service, provided those interests are not overridden by your rights.

7. International transfers

We and our sub-processors may process your information in countries other than the one in which you live, including the United States. Where required, we rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) for such transfers.

8. Security

We use technical and organizational measures designed to protect your information, including encryption in transit, scoped access tokens, and rotating credentials. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

11. Contact

Kiloma Advanced Solutions is the controller of your personal information. For privacy questions or requests, contact privacy@kiloma.com. For general support, contact support@kiloma.com.