Summary
Zero Contact is built so that your private life stays private. In short:
- There is no account and no sign-up.
- Everything you write — journal, unsent messages, reasons, red flags, letters, check-ins — is stored on your device (or in your own private iCloud if you turn sync on). We never receive it.
- The AI coach runs entirely on your iPhone. Conversations are not sent anywhere and are not saved.
- Some limited technical data is processed by our service providers to deliver purchases (Apple, RevenueCat), optional marketing notifications (OneSignal) and ads in the free version (Google AdMob).
- We do not sell your personal data.
Who we are
Zero Contact (“the app”) is developed and published by Tostorif Apps (“we”, “us”). We are responsible (data controller) for the limited personal data described in this policy. You can contact us at any time at tostorifapps@proton.me.
Data stored only on your device
The following information is created by you and stays on your iPhone or iPad. We cannot see it:
- Your streak dates, slips and the notes or tags you add to them.
- Onboarding answers: what you’re healing from, your triggers, your risky hours and your “why”.
- Check-ins (mood, urge level, context tags) and urges you log.
- Journal entries, unsent chats and messages, reasons, red flags and the “ick list”.
- Letters to future you, lesson progress and your plant (Sol).
- Your safe person’s name and phone number, and the nickname you give the person you’re keeping distance from.
- Settings such as language, reminders, Face ID lock and low contact mode.
If you turn on iCloud sync, this data is stored in your private iCloud database, which only your Apple ID can access, under Apple’s privacy policy. Widgets and Live Activities show your streak and, if you choose, your own reason on your Lock Screen. Exporting your journal as a PDF creates a file only you decide where to share.
The AI coach
The coach uses Apple’s on-device Foundation Models (Apple Intelligence). What you type is processed on your device and is never sent to us or to any third party. Conversations are kept only while the coach is open and are deleted when you close it.
Messages that suggest you may be in danger are not sent to the model; instead the app shows local crisis lines. If you tap “Report this reply”, your email app opens with the coach’s reply so you can send it to us — nothing is sent unless you choose to send that email.
Emergency Mode, Face ID and permissions
- Emergency Mode uses Apple’s Screen Time (Family Controls). The apps you select are represented by private tokens on your device; we cannot see which apps you chose or how you use them.
- Face ID / Touch ID is handled by iOS. We never receive biometric data — the app only learns whether unlocking succeeded.
- Notifications: reminders and check-ins are scheduled locally on your device and never include the other person’s name or anything you wrote.
- Tracking (App Tracking Transparency) is only requested in the free version, for ads (see below).
Purchases (Apple and RevenueCat)
Payments are processed by Apple. We never see your payment details. To manage Zero Contact Pro we use RevenueCat, Inc., which receives: an anonymous app user ID generated by the app, your purchase and subscription history, the App Store country, basic device and app information (model, OS version, app version), the app install date, which paywall design you saw, and the OneSignal identifier described below. RevenueCat does not receive your name or email address.
Notifications and in-app messages (OneSignal)
If you allow notifications, we may send occasional news and offers through OneSignal, Inc. OneSignal receives your push token, device and OS information, language, time zone, app version and a few anonymous tags: whether you have Pro, your plan and trial status, your streak range (for example “7–29 days”), whether you finished onboarding, whether you saw a paywall, how many days since you last opened the app (as a range), and whether you consented to ads. It never receives your writing, your check-ins or the other person’s name.
You can stop these messages at any time in Settings → Offers & news, or turn off notifications for Zero Contact in iOS Settings. Your functional reminders work either way.
Ads in the free version (Google AdMob)
The free version shows ads served by Google AdMob (Google Ireland Ltd. / Google LLC). Pro users see no ads and the ad SDK does not request ads for them.
- In the EEA, the UK and Switzerland we ask for your consent with Google’s consent message (Google UMP) before ads are personalised. In US states with privacy laws, you can opt out of the sale or sharing of data.
- If you allow tracking, Google may use your device’s advertising identifier (IDFA) to personalise ads. If you don’t, ads are not personalised with it.
- Google may process your IP address (to estimate an approximate location), device information, ad interactions and diagnostic data to serve ads, measure them and prevent fraud.
You can change your choices at any time in the app (Settings → Privacy choices) and in iOS Settings → Privacy & Security → Tracking. More information: policies.google.com/technologies/partner-sites.
Legal bases (GDPR)
- Performance of a contract: providing the app and Pro purchases you request.
- Consent: personalised ads, tracking, and marketing notifications. You can withdraw consent at any time.
- Legitimate interests: keeping the service secure, preventing fraud and understanding purchases in aggregate.
Retention
Data on your device stays until you delete it or delete the app. iCloud data stays until you delete it from your iCloud account. RevenueCat, OneSignal and Google keep data for as long as needed for the purposes above and according to their own retention policies; we can ask them to delete data linked to you on request.
International transfers
RevenueCat, OneSignal and Google may process data in the United States. These transfers rely on the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.
Your rights
You have the right to access, correct, delete, restrict or object to the processing of your personal data, the right to data portability and the right to withdraw consent. Because we don’t hold your content, most of it is fully under your control on your device. For data held by our service providers, write to tostorifapps@proton.me and we will help you. You also have the right to lodge a complaint with a data protection authority — in Spain, the Agencia Española de Protección de Datos (aepd.es) — or the authority in your country.
Children
Zero Contact is not directed at children. You must be at least 13 years old (or the minimum age of digital consent in your country) to use it.
Security
Your data is protected by iOS security, including device encryption, and optionally by Face ID inside the app. Data sent to our service providers travels over encrypted connections.
Changes
We may update this policy when the app changes. We will change the date above and, for significant changes, let you know in the app.
Contact
Questions or requests about privacy: tostorifapps@proton.me.