1. Who We Are
Contach ("we," "us," "our") provides a mobile application and companion web services that help you organize professional relationships, log interactions, and stay in touch with the people who matter to your career. This Policy applies to the Contach mobile app, this website, and any related services we operate.
2. Data We Collect
We collect only what is required to operate the service:
- Account data — your name, email address, and profile photo, whether you sign in with an email/password or with Google OAuth.
- Contact records — the people you add to your network, whether typed in manually, scanned from a business card, captured via QR/vCard exchange, or imported from a LinkedIn "Connections.csv" export that you choose to upload. Imported fields may include name, headline, company, job title, and public profile URL, exactly as they appear in the file you provide.
- Notes and interaction history — tags, reminders, relationship-cadence settings, and any notes you write about a contact.
- Media you upload — profile photos and business-card images you choose to attach to a contact.
- Device and usage data — basic diagnostic information (crash logs, push-notification tokens) needed to keep the app working reliably.
3. How We Use Your Data
Your data is used exclusively to operate Contach for you: rendering your own dashboard, generating relationship-health reminders you've configured, and powering optional AI features when you explicitly invoke them (for example, AI-assisted business card scanning, icebreaker suggestions, or weekly digest summaries).
AI processing. Certain features send limited, relevant data to third-party AI infrastructure providers strictly to generate the specific insight, summary, or reminder you requested. That data is never used to train public or general-purpose AI models, and is not retained by those providers beyond what is required to fulfill your request.
4. We Do Not Sell Your Data
We do not sell, rent, or share your contacts or personal data with third-party marketers, data brokers, or advertising networks — ever. Your professional network is yours. Full stop.
We share data only with the infrastructure processors listed in Section 6, and only to the extent necessary to operate the service you use.
5. Authentication Data
If you sign in with Google OAuth, we receive your name, email address, and profile photo from Google as authorized by you during sign-in — we never receive or store your Google password. If you sign in with email and password, your password is hashed and salted by our authentication provider (Supabase Auth) and is never visible to us in plain text.
6. Third-Party Processors
We rely on the following processors strictly to operate Contach. None of them may use your data for their own marketing purposes:
- Supabase — encrypted database, authentication, and file storage, hosted in the EU.
- AI inference providers — process specific requests (e.g. card scans, icebreaker generation) under a strict no-training clause, as described in Section 3.
- Apple App Store & Google Play — payment processing for Pro subscriptions. Contach never receives, processes, or stores your payment card information.
- RevenueCat (or similar subscription backend) — securely manages and syncs your subscription status across devices without accessing your payment details.
- Expo & Vercel — application delivery and push notifications.
7. Data Storage and Security
Data is stored in encrypted Postgres databases with row-level security, so your data is only ever accessible to your own authenticated account. Authentication tokens are kept in your device's secure storage. Business-card and profile images are stored in access-controlled storage buckets, private by default.
8. Your Rights and Controls
You are always in control of your data:
- Access & export — view and export any contact record at any time.
- Correction — edit or delete any individual contact from its detail screen, at any time.
- Bulk deletion — select and permanently delete multiple contacts at once from the main contact list.
- Full account deletion. You may permanently delete your account and every record associated with it — profile, contacts, notes, imported connections, and media — from Profile → Privacy & Security → Delete Account. This action is immediate and irreversible; no data is retained after deletion completes.
9. Children's Privacy
Contach is a professional-networking tool not directed at children. We do not knowingly collect personal data from anyone under 16 years of age.
10. International Data Transfers
Our primary infrastructure is hosted in the European Union. Where a processor operates outside the EU/EEA, we require appropriate safeguards (such as Standard Contractual Clauses) to be in place before any data is transferred.
11. Changes to This Policy
We will post any material changes to this page and update the "Last updated" date above. Continued use of Contach after a change constitutes acceptance of the revised Policy.
12. Contact Us
Questions about your data or this Policy can be sent to agokcimen2811@gmail.com.