Privacy Policy

How Shard protects your data

Last Updated: January 2025

Introduction

Thank you for using Shard ("we", "our", or "the App"). We are committed to protecting your privacy and being transparent about how we handle your data. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

Information We Collect

Data You Provide

Shard is designed to work entirely on your device. The information you enter into the App includes:

  • Shards: Text content, voice transcriptions, and captured text from images
  • Categories: Task, Note, Idea, or Event classifications
  • Tags: Contextual tags extracted or added manually
  • Dates: Reminder dates and timestamps
  • Settings: Your preferences and configuration options

Automatically Collected Information

Device Information: We do not collect any device information, analytics, or usage data. The App does not contain any third-party tracking or analytics services.

Biometric Data: If you enable biometric authentication (Face ID/Touch ID), your biometric data remains securely stored on your device within the Secure Enclave and is never transmitted to us or any third party. We only receive a pass/fail authentication result from iOS.

How We Use Your Information

All data processing happens entirely on your device:

  • Shard Intelligence: AI categorisation, tagging, and text processing uses Apple's on-device Foundation Models. No data is sent to external servers.
  • Voice Transcription: Speech recognition uses Apple's on-device speech recognition. Audio is processed locally and never uploaded.
  • Text Recognition: Camera text extraction uses Apple's VisionKit, processing images entirely on your device.

Data Storage

Local Storage

By default, all your data is stored locally on your device using Apple's secure storage mechanisms. This data:

  • Remains on your device unless you enable iCloud Sync
  • Is protected by your device's encryption
  • Can be secured with Face ID or Touch ID
  • Is deleted when you uninstall the App

iCloud Sync (Optional)

If you enable iCloud Sync (requires Pro or Ultimate subscription):

  • Data is stored in your private iCloud account
  • Synchronisation uses Apple's CloudKit with end-to-end encryption
  • Data remains in your control and is not accessible to us
  • You can disable sync at any time in Settings

In-App Purchases

Shard offers Pro and Ultimate subscriptions processed through Apple's App Store. When you make a purchase:

  • The transaction is handled entirely by Apple
  • We receive only a transaction receipt from Apple to verify your subscription status
  • We do not collect or store your payment information
  • Apple's Privacy Policy governs how Apple handles your payment data

Notifications

Shard can send local notifications for:

  • Date-based reminders extracted from your Shards
  • Daily Digest summaries (Ultimate tier)

These notifications are:

  • Generated and delivered entirely on your device
  • Based solely on the data you enter into the App
  • Not sent through any external servers
  • Managed through iOS notification permissions

Data Sharing

We do not share your data with anyone. Since all data remains on your device (or in your private iCloud account if you enable sync), there is no data sharing with third parties, advertisers, or analytics companies.

When you use integrations (Notion, Tana, Todoist, etc.), data is sent directly from your device to those services according to your configuration. We do not proxy or store this data.

Data Security

We take your security seriously:

  • All data is stored using Apple's secure storage mechanisms
  • Biometric authentication uses iOS Secure Enclave technology
  • iCloud sync uses Apple's end-to-end encryption
  • The App does not transmit data to any external servers except Apple's iCloud (if you enable sync) or your chosen integrations

Your Rights and Choices

You have complete control over your data:

  • Access: All your data is visible within the App
  • Modify: You can edit or delete any Shard at any time
  • Export: You can export Shards to Obsidian, Notion, or other services
  • Delete: You can delete individual items or clear all data by uninstalling the App
  • iCloud Sync: You can enable or disable iCloud synchronisation at any time
  • Notifications: You can control notification permissions in iOS Settings

Children's Privacy

Shard is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with data, please contact us so we can delete it.

Third-Party Services

Shard uses the following Apple services:

  • StoreKit: For processing in-app purchases (governed by Apple's Privacy Policy)
  • CloudKit: For optional iCloud synchronisation (governed by Apple's Privacy Policy)
  • UserNotifications: For local notification delivery on your device
  • Foundation Models: For on-device AI processing
  • Speech Recognition: For on-device voice transcription
  • VisionKit: For on-device text recognition

We do not use any third-party SDKs, analytics services, advertising networks, or tracking tools.

Data Retention

  • Local Data: Remains on your device until you delete it or uninstall the App
  • iCloud Data: Remains in your iCloud account until you delete it manually through the App or iCloud settings
  • Subscription Data: Apple retains transaction records according to their policies; we only store verification status on your device

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

  • Updating the "Last Updated" date at the top of this policy
  • Providing notice within the App if the changes are significant

Legal Basis for Processing (UK GDPR)

For users in the United Kingdom, our legal basis for processing your data is:

  • Consent: When you choose to enable iCloud sync or biometric authentication
  • Contract: To provide the App's core functionality and subscription features
  • Legitimate Interests: To improve the App and provide customer support

Your UK GDPR Rights

If you are in the UK, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data
  • Restrict processing
  • Object to processing
  • Data portability

Since all data is stored locally on your device or in your private iCloud account, you have direct control over these rights through the App itself.

Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Email: support@shardsapp.com