Privacy Policy

This Privacy Policy explains how Pombry (“Pombry,” “we,” “us”) handles information in the Pombry iOS app and on pombry.app. We built Pombry to be private by default.

The short version

Your notes live on your device. We don’t run ads, we don’t track you across apps or the web, and we don’t sell your data. The only information that leaves your device is what you explicitly choose to send, such as a bug report, or what an optional feature you enable needs to work, such as Cloud Enhance.

Website waitlist

If you join the waitlist on pombry.app, we collect the email address you enter so we can confirm your signup and send Pombry launch updates. The signup is voluntary, and every marketing email includes an unsubscribe link.

Service providers store waitlist subscription records, deliver requested email, and check the signup form for automated abuse. The abuse-prevention service may process an IP address and basic browser or device signals needed to secure the form. We require these providers to use the information only to provide services to Pombry. We do not put note content in any of these services.

What stays on your device

Your notes, to-dos, ideas, spaces, connections, and attachments are stored locally on your device. On the Free plan there is no Pombry account and no cloud copy. You can export a JSON snapshot or erase everything at any time in Settings → Data & Backup.

Location reminders

If you use place reminders (“remind me when I get home”), the places you save and their coordinates are stored only on your device and are processed on-device by iOS to trigger the reminder. Your location is never sent to us or to any server, and analytics never include coordinates or place names.

iCloud Sync (optional, Premium)

If you enable iCloud Sync on a Premium plan, your notes are mirrored to your own private iCloud database so your devices stay in step. That data is handled by Apple under your iCloud account; we never see it and cannot read it. Sync is off by default and the Free plan is local-only.

Diagnostics you choose to send

If you tap Help & Feedback → Report a bug, the report includes only data Apple permits an app to collect without special consent:

• App version and build number, and the bundle identifier
• An install-scoped identifier (Apple’s identifierForVendor). It is not shared with other developers’ apps and resets if you delete the app
• Device model (e.g. “iPhone17,1”), iOS version, locale, and time zone
• Basic device stats (free disk, memory, low-power state) and recent in-app log lines

We never collect your name, your note contents, contacts, precise location, an advertising identifier (IDFA), or hardware identifiers like UDID, serial number, IMEI, or MAC address. The app never transmits a report by itself: you send it through the iOS share sheet, so you see exactly what leaves your phone and choose how it travels. We use it solely to diagnose and fix the issue.

Pombry Intelligence

Pombry Intelligence processes supported transcription, cleanup, categorization, and resurfacing features on your device. Local processing does not send your note content, recordings, or saved vocabulary to Pombry or to a third-party AI provider.

Cloud Enhance (optional, Premium)

Cloud Enhance can use third-party large language models (LLMs) to improve supported transcription, cleanup, briefings, titles, descriptions, and photo understanding. It is optional. When you enable Cloud Enhance and use a supported feature, only the text, audio, or image required for that request is sent securely through our backend to an AI processing provider. Our current Cloud Enhance provider is OpenAI. The provider processes that content to return the requested result.

A Premium subscription does not by itself authorize Pombry to send your content for cloud processing. The app shows your current processing choice, and you can switch back to local processing in Settings. Cloud features are subject to fair-use limits. If an allowance is reached or a provider is unavailable, Pombry keeps working with the best available on-device result.

Service providers

We rely on Apple for App Store distribution, StoreKit billing, and optional private iCloud sync. We also use service providers for waitlist storage, email delivery, signup abuse prevention, and the optional Cloud Enhance processing described above. They may process information only to provide those services and must protect it consistently with this policy. We do not share your information with advertisers or data brokers.

Data retention

• Your notes stay on your device until you delete them; deletion is immediate and local
• Automatic backups (Premium, optional) keep only the five most recent snapshots, on-device
• Uninstalling the app removes all app data from the device
• Bug reports exist only where you chose to send them; the app keeps no copy
• Waitlist information is kept while you are subscribed. If you unsubscribe, we retain the address and unsubscribe status as a suppression record so we do not email you again

Security

Your notes, backups, photos, and voice recordings are protected with iOS Data Protection (encrypted at rest, with our files using the strongest “complete” class). There is no Pombry account and no Pombry server holding your notes, which removes the most common ways note data gets breached.

Your rights and choices

• Export your data as JSON, or erase all content, in Settings → Data & Backup
• Use the app entirely offline on the Free plan
• Keep processing local by leaving Cloud Enhance off or selecting Local Only
• Your JSON export is a full, portable copy of your data (data portability)
• Unsubscribe from waitlist email at any time, or ask us to delete your waitlist information by emailing contact@pombry.app

We do not sell or share personal information as defined by the California Consumer Privacy Act, and we do not use your data for advertising. Because your notes never reach us, requests to access or delete server-held data generally do not apply; everything is in your hands on the device. If you enable Cloud Enhance, the text, audio, or image required for the feature is processed by OpenAI through its API to return the requested result. OpenAI does not use API inputs or outputs to train its models by default. Unless Pombry qualifies for and enables a stricter retention control, OpenAI may retain content in abuse-monitoring logs for up to 30 days, or longer when required by law.

Children

Pombry is not directed to children under 13, and we do not knowingly collect their data.

Changes

We may update this policy as the app evolves. Material changes will be reflected here with a new “Last updated” date.

Contact

Questions about privacy? Email contact@pombry.app.