Privacy Policy

What Aftr stores on your device

When you use Aftr, the following information is created and stored locally on your iPhone:

• Visits — timestamps, durations, and approximate coordinates for places the app detects you spent meaningful time at, via Apple’s CLVisit API.
• Places — names, categories, and addresses resolved from those visits using Apple Maps reverse geocoding (CLGeocoder) and Apple Maps search (MKLocalSearch). These look-ups are made directly from your device to Apple’s services.
• Photos — when you grant photo permission, Aftr reads timestamp and GPS metadata from your Camera Roll to suggest matches for visits, and stores a local asset identifier so it can show the photo inside the app. The photo itself is not copied or transmitted.
• Notes — any free-text notes you write about a place.
• Subscription state — whether you have an active Aftr subscription, as reported by Apple’s StoreKit framework.

If you sign in to iCloud, your Aftr data may be synced to your own iCloud account via Apple’s CloudKit. This keeps your data available across your devices, but it is stored in your private iCloud container—we have no access to it. Apple’s privacy practices govern that storage.

What Aftr sends off your device

The only outbound data is:

• Apple Maps queries for reverse geocoding and venue search. These go directly to Apple’s servers. Apple’s privacy policy governs them.
• App Store / StoreKit queries for subscription pricing, purchase, and receipt validation. These go to Apple.
• Anonymous product analytics via TelemetryDeck. These are short event signals such as paywall_shown, backfill_completed, or purchase_succeeded. They contain no place names, no coordinates, no notes, no photos, no user IDs. The signals are sent over a salted-hash mechanism that prevents tying events back to a specific device or user.

You can disable analytics at any time in Settings → Privacy → Analytics.

What Aftr never collects

• We do not collect your name, email, phone number, or any account identifier.
• We do not collect contacts, calendars, health data, financial data, payment info, or browsing history.
• We do not use the IDFA, Game Center, Sign in with Apple, or third-party ad SDKs.
• We do not track you across other apps or websites.

Permissions Aftr requests

• Always Location. Required for Apple’s CLVisit API to detect places in the background. Without this permission, Aftr cannot do passive logging — which is the entire purpose of the app.
• Photos. Required for the photo-backfill feature, which scans GPS-tagged photos to bootstrap your map. You can decline this permission and Aftr will continue to work, just without the photo features.

You can revoke either permission at any time in iOS Settings → Privacy.

Children’s privacy

Aftr is not intended for children under 13 and does not knowingly collect personal information from children.

Your rights

Because all of your Aftr data lives on your device, you have full control:

• Export. Settings → Data Export produces a JSON file with your complete Aftr history.
• Delete. Uninstalling Aftr removes all local data. Settings → Reset Aftr also wipes the database from inside the app.
• Subscription. You can cancel anytime in iOS Settings → [your name] → Subscriptions.

You don’t need to email us to “request a copy of your data” because we don’t have a copy of it.

Changes to this policy

If we materially change what Aftr collects, we will update this page and the “Last updated” date. Significant changes will be communicated in-app.

Contact

Questions about this policy: support@nennovate.com