Privacy Policy

Deletable is developed and published by DR Tech Ventures LLC. References to "we," "us," or "our" in this policy refer to DR Tech Ventures LLC.

The following data is stored exclusively on your device and is never transmitted to our servers or any third party:

• All vault content: notes, photos, and any text you type
• Your encryption master key (stored in the iOS Keychain)
• Your folders, settings, and preferences
• Location data associated with notes
• Biometric authentication configuration
• Your Deletable Plus entitlement state, once purchased

Photos you store carry no metadata at all. Every import and capture is re-encoded on the way into the vault, so a stored photo has no GPS coordinates, no capture timestamp, and no device model attached — the original file's metadata never reaches storage in the first place.

If you turn on Add to Calendar (iPhone only, off by default), the time each item deletes is written to a separate "Deletable" calendar on your device, which your iCloud account then syncs like any other calendar. The events carry no titles, text, photos or identifiers, and they go to your iCloud account, never to us.

Reminders you set on a note (Deletable Plus) are scheduled as local notifications on your device. They read only "Reminder" unless you turn on Settings → Notifications → Show Note Content, which shows the note's title and the checklist item on your lock screen — never the note itself. Expiry reminders never name the item either way.

If you use the Apple Watch app, each note you save on the watch is encrypted on the watch to a key that only your iPhone holds, and travels to your iPhone directly over Apple's watch connection — never to us. The watch cannot read your vault. If you dictate a note, or use Siri on the watch, Apple may process that speech under Apple's own privacy policy.

By default your vault is excluded from iCloud and computer backups, so a backup never holds a copy of it. If you turn on Settings → Privacy → Include Vault in Backups on iPhone, your still-encrypted vault is included in your own device backups — which go to Apple or your computer, never to us.

Your locations themselves never leave your device. We do sync an anonymous count of how many deletions were triggered by location rules — a number only, never coordinates, addresses, or geofences (see Section 3).

When the app is initialized and when vault activity occurs, Deletable syncs general anonymized usage statistics to our Supabase backend. This data is linked to a randomly generated UUID created at first launch — it has no connection to your Apple ID, Google account, name, email, or device serial number. It consists only of counts, flags, and timestamps — never your notes, photos, or any content you store. The categories are:

• Device information — platform, device model, OS version, app version and update, language, and four display settings: text size, bold text, increase contrast, and reduce transparency (never whether you use a screen reader)
• Usage counters — items created and deleted, storage freed, app opens, days active, and how often features like folders, manual deletion, location rules, reminders, sharing and Apple Watch notes are used
• Current vault totals — how many items your vault holds right now
• App state — current achievement tier, notification and calendar permission status, which settings switches are on (for example Add to Calendar or on-device suggestions — never what they contain), whether onboarding is complete or a widget is active, and related timestamps
• Deletable Plus status — whether you have Plus, which plan and store, its start, renewal and expiry dates, whether it is a sandbox test purchase, and how often the paywall is viewed and purchases are started, completed, or cancelled. Never payment details.

We use this data solely to understand aggregate app usage and power the in-app statistics features.

You can turn this off entirely. Settings → Privacy → Anonymous Usage Stats. With it switched off, Deletable sends no statistics, and any already queued for retry are discarded rather than sent later. Crash reports (Sentry) and purchase verification (RevenueCat), described in Section 4, are separate and still run.

We use Supabase to store the anonymous statistics described above. Supabase is a US-based service.

If you purchase Deletable Plus, we use RevenueCat to verify and restore your purchase with the App Store. RevenueCat receives an anonymous identifier and your subscription state; it never receives your name, email, or any vault content, and we never see your payment details — those stay between you and Apple. If you never purchase Plus, no purchase data is created at all.

We also use Sentry to capture crash reports so we can fix them. Crash reports contain diagnostic information about the app, never your notes or photos. Sentry also receives performance timings — how long screens and operations take — for a sample of roughly one in five of them.

Anonymous statistics in Supabase are retained indefinitely to power aggregate statistics features. Deleting the app removes all local data. Your Supabase record (containing only anonymous statistics) will persist but cannot be linked to you by us. Contact us if you would like it removed and can provide your random device UUID (visible in the app under Settings → About).

This website collects a small amount of data of its own, separate from the app:

• Contact form — if you contact us, we collect the name, email address, subject, and message you submit. Submissions are stored in Supabase and emailed to us via Resend, and are used only to respond to your inquiry.
• Launch email — if you ask to be told when Deletable reaches the App Store, we collect only your email address and which page you signed up on. It is stored in Supabase, used solely to send that one announcement (via Resend), and then deleted along with the rest of the list. To be removed sooner, ask via the contact form.
• Analytics & performance — we use Vercel Analytics and Speed Insights to measure aggregate page views and site performance. They do not use cookies and do not identify individual visitors.
• Error monitoring — we use Sentry to capture site errors so we can fix them.
• Rate limiting — contact form and launch email submissions are rate-limited by IP address to prevent abuse; IPs are held only transiently for this purpose.

If you are in the European Economic Area, the United Kingdom, or California, you have rights over your personal data — including the right to know what we collect, to access it, to correct it, to delete it, to receive a copy of it, and to object to or restrict certain processing. California residents also have the right not to be discriminated against for exercising these rights.

In practice, the only personal data we hold is what you submit through the website contact form or launch email signup — the app statistics described in Section 3 are anonymous and cannot be linked to you by us. We do not sell or share your personal information as defined by the CCPA/CPRA. Where the GDPR applies, we process contact form data to respond to your inquiry (legitimate interest), launch email addresses to send the one announcement you asked for (consent) and anonymous usage statistics to improve the app (legitimate interest).

To exercise any of these rights, reach out via the contact form and we will respond within the timeframe required by law. You also have the right to lodge a complaint with your local data protection authority.

Deletable is not directed at children under 13. We do not knowingly collect any information from children under 13.

We may update this policy as the app evolves. The current version is always available at this URL. Continued use of the app after changes constitutes acceptance of the updated policy.

Questions about this privacy policy? Reach out via the Help page.