Privacy Policy for Netty

Last updated: September 18, 2026

Summary

Netty is a private-by-default, local-first app for organizing memories and relationships. Your vault lives on your iPhone or iPad. Netty does not run a cloud that receives your vault data. Data leaves your device only when you explicitly choose an outward path (for example export, sharing, or LAN device sync you initiate).

What data we access

On your device

Data we do NOT collect

Subscriptions & purchases

Netty is sold as an auto-renewing subscription through Apple’s App Store. Purchases, renewals, refunds and restores are processed by Apple under Apple’s own privacy policy. To check whether your subscription is active, Netty uses RevenueCat, a subscription-management service. RevenueCat receives an anonymous, app-generated identifier, your App Store purchase and subscription status, and basic device information (such as app version and platform). Netty never sends RevenueCat your name, email, contacts, memories, photos, voice, or anything from your vault, and never creates a Netty account. This data is used only to unlock the subscription you paid for and to restore it on reinstall; it is not used for advertising or analytics. You can manage or cancel the subscription in your Apple ID settings at any time.

Camera & photos

Netty requests Photos access only after you tap Find nearby photos. It searches for photos taken around the memory time and processes thumbnails on this device. Netty does not upload, modify, or save copies of those library photos.

Camera access is used only when you choose to scan the pairing code shown by the Netty Mac app. The QR frame is not stored.

Voice

Voice capture stays on your device. Final transcripts use on-device WhisperKit. Live partial captions use Apple on-device speech recognition when the language model is available on the phone. Netty does not send audio to third-party AI providers.

Languages & optional packages

Netty preserves memories in any language. Interface, on-device translation, and enhanced semantic recall availability vary by language and device. Netty's multilingual recall model ships inside the app: enabling it verifies and activates the bundled files on your device and involves no network request. Apple translation packages are optional, are requested only after you approve them, and are downloaded and managed by Apple; none of your memories, names, queries, or identifiers accompany that request. Translation always happens on your device.

iOS integrations

When Appear in iPhone Search is on, Netty indexes person names and memory titles in Apple's on-device Spotlight index so you can open them from the home-screen search field. Full memory text stays in Netty. Turn this off anytime in Settings → Integrations.

When Meeting suggestions is on, Netty reads calendar events that ended in the last ~90 minutes to suggest adding attendees not already in your galaxy. Calendar data is not copied into your vault.

When you schedule or reschedule a shared plan through Netty (for example accepting a proposed time for a meetup), Netty creates the matching calendar event only after you explicitly approve that action, and removes it the same way if you cancel it through Netty. These calendar events are processed on your device and are never uploaded to Netty servers.

When you use Share to Netty, confirmed text or links are saved into your local vault only — never uploaded.

Siri / Shortcuts Open Person reads a lightweight on-device people list (names and roles only) to help you open someone in your galaxy.

Backups & export

Automatic copies may be included in your iPhone/iCloud device backup if you have iCloud Backup enabled in iOS Settings — that is Apple’s backup of your device, not a Netty cloud service. Export backup and share-sheet exports leave the device only when you explicitly choose a destination. Netty itself never uploads your vault.

Data security

All data is stored locally on your device and persists in the app's local vault. Face ID / passcode can gate the app. Storage is protected by iOS Data Protection. No unencrypted data is transmitted because Netty does not operate a server that receives your vault.

Deletion

To delete all your data, use “Delete all Netty data” in Settings. This permanently removes all memories, contacts, and vault data from your device. No recovery is possible after deletion unless you kept an export you made yourself.

Changes to this policy

We may update this policy to reflect changes in iOS requirements or app features.

Contact

For privacy questions, contact: netty.hello@gmail.com.

Key point: Netty is private by default: your vault stays on-device unless you explicitly choose to export/share/sync it.