Privacy Policy — HumanMap

This Privacy Policy explains how HumanMap ("the App", "we", "our", or "us") handles information when you use the HumanMap iOS app. HumanMap is a private, on-device memory of the people you meet. It is built to be private by design: everyone you capture, everything you say, and every note you keep are stored entirely on your iPhone, with no account and no servers operated by us. Your memories never leave your iPhone.

We do not collect your personal data. Our privacy label on the App Store is "Data Not Collected." HumanMap has no account, login, or sign-up. The people you add, the voice notes and text you capture, the descriptions and connections the App derives, and your settings stay only on your device.

• No personal information — we do not ask for your name, email, phone number, contacts, or location history.
• No analytics or tracking — the App contains no analytics, advertising, or tracking SDKs, and does not track you across apps or websites.
• Nothing you record leaves your device — your captures, transcripts, and the notes you keep about people are processed and stored on your iPhone and are never uploaded to us or anyone else.

The heart of HumanMap is capturing a person in seconds by speaking. This works only on your device:

• Microphone & speech — when you capture by voice, your speech is transcribed on your device using Apple's on-device speech recognition. Audio is processed on-device and is never sent anywhere.
• On-device AI — HumanMap uses Apple's on-device Foundation Models (Apple Intelligence) on supported devices to turn what you said into a structured person, and to power natural-language search and resurfacing. On devices without Apple Intelligence, the App falls back to Apple's on-device Natural Language processing. In every case this happens on your iPhone, performed by the operating system; your words are not sent to us. On-device processing is subject to Apple's privacy practices.
• The sky — the night-sky visualization is rendered on your device from your own data. Nothing about it is transmitted.

To help you remember where and when you met someone, HumanMap can optionally use two device features, only when you ask it to:

• Location — if you choose to note where you met someone, the App reads your location on your device and stores it with that person. It is never transmitted off your device. Permission is requested only when you use the feature.
• Calendar — if you choose to attach the event you were at, the App reads that calendar event on your device. Calendar data stays on your device and is used only for this purpose.

HumanMap offers an optional "Pro" subscription (monthly or annual) and a one-time lifetime purchase through Apple In-App Purchase. Payments are processed by Apple — we never see or store your card details. We use RevenueCat, a third-party subscription-management service, to verify and manage your purchase. This is the only network connection the App makes. To do this, RevenueCat processes a randomly generated, pseudonymous app user identifier, your purchase and receipt information, and basic device/app information. This carries none of your personal memories or captured data and is used only to deliver and restore your purchase, not to identify you personally.

Your captures, the people and connections derived from them, and your settings are stored locally on your device using SwiftData with the device's built-in file protection. You can optionally lock the entire App behind Face ID. Because this data stays on your device, deleting the App removes it. We hold no copy of it.

You are always in control of your data:

• Export — you can export an encrypted copy of your data from Settings and store or move it yourself.
• Delete — you can delete any individual person in the App, or use "Erase Everything" in Settings to remove all of your data at once. Deleting the App also removes everything.

Because HumanMap does not collect or hold your personal data on any server, there is nothing for us to access, correct, or delete on your behalf. For subscription data held by Apple or RevenueCat, please refer to their respective policies.

• Microphone (optional) — requested only when you capture a person by speaking.
• Speech Recognition (optional) — used to transcribe your voice notes on your device.
• Location (optional) — requested only if you choose to note where you met someone.
• Calendar (optional) — requested only if you choose to attach a calendar event.
• Face ID (optional) — used to lock the App so your private memory stays yours alone.
• Notifications (optional) — used for gentle resurfacing reminders if you enable them.

Every permission is optional and requested only in the moment you use the feature that needs it.

• Apple — App Store distribution, In‑App Purchase payments, and on‑device speech recognition and Apple Intelligence. Governed by Apple's Privacy Policy.
• RevenueCat — subscription management as described above; the only network service the App contacts, and it never receives your personal data. Governed by RevenueCat's Privacy Policy.

We do not sell your data, and we do not share it for advertising.

HumanMap is not directed to children under 13 and does not knowingly collect data from them. Because the App collects no personal data, it presents minimal privacy risk to users of any age.

Privacy laws such as the EU GDPR, the UAE Personal Data Protection Law, and the California CCPA give you rights over your personal data. Because HumanMap does not collect or hold your personal data, there is nothing for us to access, correct, export, or delete. You remain in full control of your on‑device data and can export or remove it at any time from Settings or by deleting the App. For subscription data held by Apple or RevenueCat, please refer to their respective policies.

We may update this Policy as the App evolves. Material changes will be reflected here with a new effective date.

Questions about this Policy? Email [email protected].